liveca.analytix.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:ae:0f:fe:61:c7:39:6c:e4:da:18:10:3f:cf:6d:28 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=liveca.analytix.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:ae:0f:fe:61:c7:39:6c:e4:da:18:10:3f:cf:6d:28
Serial Number (int): 10208380014237697890291249598298025256
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e0:2e:60:69:73:0d:04:50:cd:ad:b9:e1:0f:10:0e:3a:11:e6:53:56
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 83:91:e8:76:db:ef:b6:20:40:f2:de:c2:af:d6:88:8c:c2:93:0f:5d
Fingerprint (sha256): 28:71:c1:1a:e0:1a:d4:4a:4d:7a:07:7b:21:27:cc:71:dd:6f:af:68:1b:96:8a:05:24:37:3b:a1:52:d0:83:8d

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate liveca.analytix.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liveca.analytix.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

liveca.analytix.com

Other certificates including the domain name analytix.com

(limited to 100 certificates)
portal.analytix.com
portal.analytix.com
portal.analytix.com
restaurant.insight360.analytix.com
restaurant.insight360.analytix.com
insight360.analytix.com
restaurant.insight360.analytix.com
analytix.com
portal.getaviera.com
analytix.com
portal.analytixsolutions.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
dental.insight360.analytix.com
portal.analytix.com
vet.insight360.aixsol.com
portal.analytix.com
dunkin.insight360.analytix.com
pattersoncpa.analytix.com
restaurant.insight360.analytix.com
portal.analytix.com
login.insight360.analytix.com
dunkin.insight360.analytix.com
portal.analytix.com
goshenaccountingsvcs.analytix.com
portal.analytix.com
analytix.com
insight360.analytix.com
restaurant.insight360.analytix.com
portal.analytix.com
hateleyhampton.analytix.com
portal.analytixsolutions.com
portal.analytix.com
dental.insight360.analytix.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
vet.insight360.analytix.com
portal.analytixsolutions.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
analytix.com
analytix.com
dunkin.insight360.analytix.com
login.insight360.analytix.com
login.insight360.analytix.com
sportsix.analytix.com
dental.insight360.analytix.com
portal.analytix.com
dunkin.insight360.analytix.com
portal.analytix.com
chatapi.analytix.com
rickhoff.analytix.com
liveca.analytix.com
portal.analytix.com
portal.analytix.com
portal.analytix.com
sni.cloudflaressl.com
login.insight360.analytix.com
restaurant.insight360.analytix.com
portal.analytixsolutions.com
portal.analytix.com
portal.analytix.com
portal.analytix.com
portal.analytixsolutions.com
info.analytix.com
sni.cloudflaressl.com
portal.analytix.com
portal.analytix.com
analytix.com
dental.insight360.analytix.com
portal.analytix.com
restaurant.insight360.analytix.com
fasttracconsulting.analytix.com
foreyesbookkeeping.analytix.com
sni.cloudflaressl.com
www.analytix.com
sportsix.analytix.com
portal.analytixsolutions.com
analytix.com
sportsix.analytix.com
hrms.analytix.com
insight360.analytix.com
info.analytix.com
portal.analytix.com
mywoops.analytix.com
portal.analytix.com
hrms.analytix.com
hrms.analytix.com
portal.analytix.com
summafinancial.analytix.com
analytix.com
portal.analytix.com
dunkin.insight360.analytix.com
promgmtco.analytix.com
vet.insight360.analytix.com
compliance.analytix.com
analytix.com
markbalogacpa.analytix.com
portal.analytix.com
primehrservices.analytix.com

Certificate

The complete raw certificate details for liveca.analytix.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOb+M0JmYMqM2AxB6FYf
eFh8XOAByf0rFQwRbXXABZQ0yXcnotkCtSgJexxaRG8fnwwSS7GtM3Tw32Vgf+uy
/GbDq2sTUDPOif5POT57ycUBX5XOGbQtZ84XEbauUmfbf065kM4orfJX/YL3jvGQ
XMco4IBI9Z6WgI7h82pRlukYUfZKizt+fL+/nPSvVMyLpDZUFlMWPNOk8H1XxoIB
r/2/QZNaxcBlS8aXQO3YGXk0FXSAWi4mxTQfwULOTmQjL4E9DAo5ufLr3MkiJpLv
hQ2QUAQ3beO16045YKgp21uP3XdDHmhJm576SBQlzgF3dO2tVVg0TnkzwlmVs6bg
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10208380014237697890291249598298025256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liveca.analytix.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20312035673274253871209513471531888306842308517990467669153377223567001991378067577420799089847125915873740266939095339606419013243132771170315209078320946798175498536941165894696796169717625114172076197233666003055741686636011434843520360388107086963003311864861987599904164380241789585209353350692494263213148267405588139228597455891925614569801180750106450872448536231350193610093089503777831372621534070903432812746056618004460024484544464323054934788574722925410711919998657726117227237948194638895244614349010812530965087416606372860188112508354962877253946896306279938419535574847082690036528154418527475261593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e02e6069730d0450cdadb9e10f100e3a11e65356
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveca.analytix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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