sdt.avigilon.com

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 57:c9:d2:80:36:20:3f:dd:2c:e7:60:dd:42:0e:37:24 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=sdt.avigilon.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 57:c9:d2:80:36:20:3f:dd:2c:e7:60:dd:42:0e:37:24
Serial Number (int): 116690756765825927718224909185848325924
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): d7:8d:92:4d:91:ac:15:06:94:9f:8b:39:0d:19:0e:3c:95:95:81:65
Fingerprint (sha256): 38:11:75:13:2b:55:0b:40:19:91:44:72:92:49:b3:23:c6:d7:f3:81:b0:d0:55:a2:b6:be:87:ae:a4:e8:40:f3

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate sdt.avigilon.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sdt.avigilon.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sdt.avigilon.com

Other certificates including the domain name avigilon.com

(limited to 100 certificates)
360in1.net
msan2.myabsorb.com
*.cloud.avigilon.com
imperva.com
360stu.net
imperva.com
360stu.net
info.avigilon.com
360in1.net
incapsula.com
msan2.myabsorb.com
incapsula.com
360in1.net
lrm.avigilon.com
na2.alta.avigilon.com
csa.avigilon.com
akamaisecure6.qualtrics.com
blue.avigilon.com
partner.avigilon.com
ers1.avigilon.com
alerts.avigilon.com
exp1-e.avigilon.com
360stu.net
msan2.myabsorb.com
help.avigilon.com
swdp.avigilon.com
msan2.myabsorb.com
msan2.myabsorb.com
mail.avigilon.com
360in1.net
360stu.net
360stu.net
fs.avigilon.com
360stu.net
exp1-e.avigilon.com
alerts.avigilon.com
expressway.avigilon.com
msan2.myabsorb.com
*.blue.avigilon.com
msan2.myabsorb.com
dev.avigilon.com
360stu.net
mail.avigilon.com
hubble.sandbox.alta.avigilon.com
imperva.com
akamaisecure6.qualtrics.com
developer.avigilon.com
akamaisecure6.qualtrics.com
360in1.net
msan2.myabsorb.com
akamaisecure6.qualtrics.com
partners.avigilon.com
360stu.net
360stu.net
eu2.alta.avigilon.com
eu4.alta.avigilon.com
sdt.avigilon.com
ftp.avigilon.com
360stu.net
imperva.com
csa.avigilon.com
cdn.avigilon.com
ers1.avigilon.com
akamaisecure6.qualtrics.com
sdt.avigilon.com
*.avigilon.com
incapsula.com
*.avigilon.com
sdt.avigilon.com
cdn-cms.avigilon.com
imperva.com
developer.avigilon.com
blue.avigilon.com
api.au.cloud.avigilon.com
*.avigilon.com
incapsula.com
msan2.myabsorb.com
hubble.dev.alta.avigilon.com
360stu.net
avigilon.com
incapsula.com
info.avigilon.com
developer.avigilon.com
eu1.aware.ava.uk
api.us.cloud.avigilon.com
hubble.sandbox.alta.avigilon.com
*.cloud.avigilon.com
app.go.avigilon.com
licensing.avigilon.com
akamaisecure6.qualtrics.com
360stu.net
hubble.sandbox.alta.avigilon.com
msan2.myabsorb.com
imperva.com
akamaisecure6.qualtrics.com
imperva.com
360in1.net
msan2.myabsorb.com
imperva.com
sftp.avigilon.com

Certificate

The complete raw certificate details for sdt.avigilon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116690756765825927718224909185848325924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sdt.avigilon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 658813768831726393405376952521052771986851916254488517120425890861401207112750249274219519446842906313075293120447441789396438203702480684639642083936664624065974921579749336251042008548260608130087151222637467557273947153021393772316452830118377765071806737222139176685955155329076661424411149197857610963774427026419517764294391534943233781131335193050358448130270434744782480547207153938263951730690144141957194340017871725020979163774383365889471313018480825994740666302186995972942029061550607874284645122815619320041152884273226197914658402221878677168890741259565226987574312686492905530310935747070238379841646189360898274308052080712345290359775167465022989524021702477077145540529789200858414432880164713964400186408117944758857177812513532979115267105701218866141505736695204066773982649776908234544330425345427994732885743130366151049265536369838527175118472042153414024306031854698897611037164584299625354658259897761747354140930463601789847741174393289892815648848379921786447411454619845277220831572396984256428798078158368993915670309969590819874823368538888752331100013902389775973610340390054363679037873544829181879188592066894282082622853751905490134053672559219793758885261622402763167896969185101737202150813937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdt.avigilon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000155089d4eae0000040300483046022100a2d561d89b9f86cfa4f472ff3732627f7c0e62a81b7a1743fc8faabbee663175022100ef9a4ad2682a85dc1b9b2f405edf578c57a52647290cb4e7695a00b501b516ac007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000155089d4ef00000040300483046022100e414e43b7f1cf6d2d92078f3e02cbff887e8e0836ce8a09b8aa9ebba59b89feb022100fcc792634aa1ba44ad60b2a23e5472c8e207c04e48fbf9277439f3a51dc117d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0084b967c49d81af7aa69deaed3f872159f99d4da4f1562834bd614c7b7c604716f1e77c0a0d4b44cce4651a2609c211b900a49914c3e05176017b61a5c339ecd510242e1e5de148f830b4828ff2965bf6f90ddbc61c2f8a1045b036ecdc4d69784fcdf4450f9fab4d053c5cfd49a0a267ba2953ffe4a93b3b440d900bd719809c898af969d7e6a23fbf93c45905de8985b360d19ba6a1206581199505421afbad829ba2bc4117c243f09e61dc563f8db5771ca030422379a9504703dc5c567d2b85947dd24bad268d9536e0371ae87bc72817cce2427dd40dd769cc21a030d7ddcc8cd9c459b6a5e63b5eac420aad1557f4b448562dd4d6488765a4cc124b0720