sdt.avigilon.com

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:23:2d:39:0b:cc:22:fa:46:3b:ba:f0:90:52:01:3e was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sdt.avigilon.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:23:2d:39:0b:cc:22:fa:46:3b:ba:f0:90:52:01:3e
Serial Number (int): 18791839559126089978331646925355483454
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d8:a8:66:32:62:07:37:6c:9f:2e:77:b4:8f:b8:8a:b2:f1:d8:89:03
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 0a:b0:0d:a5:08:88:8b:ba:e3:29:09:63:85:ea:fe:e4:44:fe:14:a0
Fingerprint (sha256): 33:26:e6:13:5a:4f:6a:2f:73:4f:c4:ec:eb:db:11:40:99:a0:7b:db:25:aa:7b:27:c2:77:0b:b8:bd:e1:ad:c1

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate sdt.avigilon.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sdt.avigilon.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sdt.avigilon.com

Other certificates including the domain name avigilon.com

(limited to 100 certificates)
360in1.net
msan2.myabsorb.com
*.cloud.avigilon.com
imperva.com
360stu.net
imperva.com
360stu.net
info.avigilon.com
360in1.net
incapsula.com
msan2.myabsorb.com
incapsula.com
360in1.net
lrm.avigilon.com
na2.alta.avigilon.com
csa.avigilon.com
akamaisecure6.qualtrics.com
blue.avigilon.com
partner.avigilon.com
ers1.avigilon.com
alerts.avigilon.com
exp1-e.avigilon.com
360stu.net
msan2.myabsorb.com
help.avigilon.com
swdp.avigilon.com
msan2.myabsorb.com
msan2.myabsorb.com
mail.avigilon.com
360in1.net
360stu.net
360stu.net
fs.avigilon.com
360stu.net
exp1-e.avigilon.com
alerts.avigilon.com
expressway.avigilon.com
msan2.myabsorb.com
*.blue.avigilon.com
msan2.myabsorb.com
dev.avigilon.com
360stu.net
mail.avigilon.com
hubble.sandbox.alta.avigilon.com
imperva.com
akamaisecure6.qualtrics.com
developer.avigilon.com
akamaisecure6.qualtrics.com
360in1.net
msan2.myabsorb.com
akamaisecure6.qualtrics.com
partners.avigilon.com
360stu.net
360stu.net
eu2.alta.avigilon.com
eu4.alta.avigilon.com
sdt.avigilon.com
ftp.avigilon.com
360stu.net
imperva.com
csa.avigilon.com
cdn.avigilon.com
ers1.avigilon.com
akamaisecure6.qualtrics.com
sdt.avigilon.com
*.avigilon.com
incapsula.com
*.avigilon.com
sdt.avigilon.com
cdn-cms.avigilon.com
imperva.com
developer.avigilon.com
blue.avigilon.com
api.au.cloud.avigilon.com
*.avigilon.com
incapsula.com
msan2.myabsorb.com
hubble.dev.alta.avigilon.com
360stu.net
avigilon.com
incapsula.com
info.avigilon.com
developer.avigilon.com
eu1.aware.ava.uk
api.us.cloud.avigilon.com
hubble.sandbox.alta.avigilon.com
*.cloud.avigilon.com
app.go.avigilon.com
licensing.avigilon.com
akamaisecure6.qualtrics.com
360stu.net
hubble.sandbox.alta.avigilon.com
msan2.myabsorb.com
imperva.com
akamaisecure6.qualtrics.com
imperva.com
360in1.net
msan2.myabsorb.com
imperva.com
sftp.avigilon.com

Certificate

The complete raw certificate details for sdt.avigilon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18791839559126089978331646925355483454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sdt.avigilon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678920062440364461792416030476839391580245283548328118810533482994954185352427698958720480909227220759047373393600347695173704413472837723111378351834487085057854670330437071158718325871093406408243380940710673213131925470745293927620957542096683187190138006657602620786108368351829812187549631057813466544591883726210190375631008719254464151523236097953595583390069804627365038552020917309569186714324364327076727096516020638268449867355480702671441104711211027748198277591665790619536193525348613541428876196402808352678648744826768857129996771773369551574202597600595700611493754058811119404155382387180540530920561881189826214965060343569550271808294202782122676741420704705249785174617562391715088119506958555107005620188561556362683976939669572113642299046641631392896132877096421500567277001014464133123548021110669920467038408146072676273726319913699071347700702203979564564540805864127049152618290883507707401471790348223285323515841940258910494872677834511449201070600033160082684816087289911578453784412137397249903933869682494098898154723904675813842813921763667031935702540477547759936778786388812039972189685257034315666714013588318953093739849149182849895230418724005878790476888710680452288288255124971752071783049561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8a866326207376c9f2e77b48fb88ab2f1d88903
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdt.avigilon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007165f54435b307240dc42694c2ac9f9ab783f147c4be1b5d3a8396cf742931a7ec1879f96af75cde4a8e669e042beaba2809f1c5fa8b92c1cbba8e8d18cd4fd63a0c82fdc80f2eeff9ff9e4d04848abc12daf3982a6198a085711b9f2172aca41f4ba05b56add890ed6d5c3c915c558fed30d204d96cad1c1deda3bf5d9fa1c80c4ce322c0d33b263472a865d15ba43b03099323acea96399b61f5712f1442bba8356ce4b8500fd24af6d74894b11c1e16c7205810f3f0a71f51ae598eb782ba5bfcb688436d0366b8602d4523b6e0f507eee793f78ea4c903efaf7376f75a209ed225eda733e31ba8afb77307182b331cb1622553657443be80512d3308f1b8