summafinancial.analytix.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0e:05:d7:1d:f2:37:55:a4:13:87:5c:c3:a2:e7:ce:2f was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=summafinancial.analytix.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:05:d7:1d:f2:37:55:a4:13:87:5c:c3:a2:e7:ce:2f
Serial Number (int): 18639516515925262106271468845485510191
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 76:db:87:70:3a:a7:75:4d:89:06:8f:66:84:48:fa:82:76:47:26:86
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): b6:f1:a2:68:8d:bd:77:0c:c9:0d:7f:17:97:74:c3:79:1f:a0:c1:a8
Fingerprint (sha256): 3e:ee:e7:a0:64:8a:84:b6:67:cf:61:e1:aa:a9:8d:da:08:21:c5:a4:e0:da:ae:6f:9f:10:f2:1b:f8:e0:1b:5a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate summafinancial.analytix.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for summafinancial.analytix.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

summafinancial.analytix.com

Other certificates including the domain name analytix.com

(limited to 100 certificates)
portal.analytix.com
portal.analytix.com
portal.analytix.com
restaurant.insight360.analytix.com
restaurant.insight360.analytix.com
insight360.analytix.com
restaurant.insight360.analytix.com
analytix.com
portal.getaviera.com
analytix.com
portal.analytixsolutions.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
dental.insight360.analytix.com
portal.analytix.com
vet.insight360.aixsol.com
portal.analytix.com
dunkin.insight360.analytix.com
pattersoncpa.analytix.com
restaurant.insight360.analytix.com
portal.analytix.com
login.insight360.analytix.com
dunkin.insight360.analytix.com
portal.analytix.com
goshenaccountingsvcs.analytix.com
portal.analytix.com
analytix.com
insight360.analytix.com
restaurant.insight360.analytix.com
portal.analytix.com
hateleyhampton.analytix.com
portal.analytixsolutions.com
portal.analytix.com
dental.insight360.analytix.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
vet.insight360.analytix.com
portal.analytixsolutions.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
analytix.com
analytix.com
dunkin.insight360.analytix.com
login.insight360.analytix.com
login.insight360.analytix.com
sportsix.analytix.com
dental.insight360.analytix.com
portal.analytix.com
dunkin.insight360.analytix.com
portal.analytix.com
chatapi.analytix.com
rickhoff.analytix.com
liveca.analytix.com
portal.analytix.com
portal.analytix.com
portal.analytix.com
sni.cloudflaressl.com
login.insight360.analytix.com
restaurant.insight360.analytix.com
portal.analytixsolutions.com
portal.analytix.com
portal.analytix.com
portal.analytix.com
portal.analytixsolutions.com
info.analytix.com
sni.cloudflaressl.com
portal.analytix.com
portal.analytix.com
analytix.com
dental.insight360.analytix.com
portal.analytix.com
restaurant.insight360.analytix.com
fasttracconsulting.analytix.com
foreyesbookkeeping.analytix.com
sni.cloudflaressl.com
www.analytix.com
sportsix.analytix.com
portal.analytixsolutions.com
analytix.com
sportsix.analytix.com
hrms.analytix.com
insight360.analytix.com
info.analytix.com
portal.analytix.com
mywoops.analytix.com
portal.analytix.com
hrms.analytix.com
hrms.analytix.com
portal.analytix.com
summafinancial.analytix.com
analytix.com
portal.analytix.com
dunkin.insight360.analytix.com
promgmtco.analytix.com
vet.insight360.analytix.com
compliance.analytix.com
analytix.com
markbalogacpa.analytix.com
portal.analytix.com
primehrservices.analytix.com

Certificate

The complete raw certificate details for summafinancial.analytix.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTj01hPNlya4OwiIZfi5
xclk0NyOAy0LzdkSFq0mye5JpHgZvGyRwzrRaFHrHDjUTkCZUq2jBV9dvh6baefP
RdvHMR/9iTOsnh/cyWHxLW/DhJqc7m2SxBTLqUmA3/GDNNTsUbB/fYe1h4uKMNci
BNFKGhlrnl+GBaUFVOL/Mv8PLRSkVMyM17YjVPCsK6u+qJ4kr/cZbUuVOYedA5gA
ANoeDHwPO6aPc4WX8xqUtYD9FWw0yNDBVsfsl2iyZE8B0Bv7cmtUDLld1I+g++BZ
rgkVRA1Ku6QN/jLYLadrDk+tzJLkh9URCkCqdYmQ4Kwp0zaewpyx29etBbVscPxX
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18639516515925262106271468845485510191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'summafinancial.analytix.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20857406562867137341387600058227193908209103327041347287411597108489144028308739270087210174105521450966616283400780744712015691569258475690088574938329429691758388223758168360784316068764832287599763661567292364123045353545376719579708043527696510088514852481187859795135572542953307522497239666047197359020550416556050829471611316118189846976463246218412796168688527667897324447539737446857990021587631321136204203783407618322840519611759446223124529101568089281362423968655882666861927973491771294010245665389272334490646227845890186718303000193694411567840309451554381672738489551866524886316110546731483147294689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76db87703aa7754d89068f668448fa8276472686
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summafinancial.analytix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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