www.acumatica.com

- Acumatica, INC. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:ad:08:ed:32:a6:ef:d0:b8:97:0e:ec:09:b0:76:94 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Acumatica, INC.

Organization: Acumatica, INC.
State / Province: Washington
Locality: Kirkland
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ad:08:ed:32:a6:ef:d0:b8:97:0e:ec:09:b0:76:94
Serial Number (int): 6215360391693598438298976841435739796
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 0a:24:02:8d:1f:6f:68:20:79:ce:c4:5b:c9:c3:60:72:ff:93:f9:fd
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 72:3a:d1:c9:e9:41:01:4d:1e:74:88:ea:c5:c2:89:5b:91:d7:ff:1e
Fingerprint (sha256): b7:f6:28:15:75:03:04:61:f7:e6:0b:1f:4d:29:9c:63:6b:65:cc:30:5b:aa:0e:d9:97:a5:f9:6a:78:3d:35:1d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl

Check the revocation status for certificate www.acumatica.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.acumatica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.acumatica.com
dev.acumatica.com
summit.acumatica.com
dev-summit.acumatica.com

Other certificates including the domain name acumatica.com

(limited to 100 certificates)
*.acumatica.com
customervoice.acumatica.com
dev.acumatica.com
acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
www.acumatica.com
lp.acumatica.com
*.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
www.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
asiablog.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
acumatica.com
feedback.acumatica.com
www.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
mail.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
new.acumatica.com
acumatica.com
www.acumatica.com
map.acumatica.com
customervoice.acumatica.com
*.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
lp.acumatica.com
feedback.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
lp.acumatica.com
www.acumatica.com
feedback.acumatica.com
internal.acumatica.com
community.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
shopifyapi.acumatica.com
acumatica.com
partners.acumatica.com
www.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
*.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
dev.acumatica.com
feedback.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
www.acumatica.com
*.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
shopifyapi.acumatica.com
viewemail.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
erp.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
*.acumatica.com
asiablog.acumatica.com
feedback.acumatica.com
www.acumatica.com
customervoice.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
new.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
viewemail.acumatica.com

Certificate

The complete raw certificate details for www.acumatica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1EqStgVUJr5FYt8ASGr
+pytJ8mdy7C5I3O5urksXmB/9STFf4Lww0l3iEYYUGECRo3v4g2zONx4Q1276Aiu
MsiWUkLNOzDRIHGEnxjTffVr3j/ZZ0vr8EAWldZArqK21IPRG0Ji/BCwiku/VTFg
z24AsTuGyua1qahhmdlIMmqJOkO+ipPm6O+QeSt7e0YQ8JHq7kuH9QON7MdkETu9
QVsOwTHAxjbPLTc1qORCRarW2+z0kEcfGXw3CnZLjK/TGY56PSbDJWMtiMxFqx+k
GUgWUIWfYIi9SHPH3Cy4XAoAVZFtIqFWli9x/UiDO3HJCzvXYl7WOnvPI6HhaYLX
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6215360391693598438298976841435739796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kirkland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acumatica, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.acumatica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25666399962180545595383438919923783560958070171679003953337682020009743275221066864564514416953052638828267441215000297109065453612333691376580814699804065911812254306886121160799482214413381684609574545631365066729068390411408416678410572251697986414421210054580465591066207326793305018062624168609837322667188203542188449470597683115853079111047769152784089407397976547820584121346187349802125062783773716497993780501974554448917655964389607945432290296830204887760126282101538897377424342096410889589899302388977234775641806130717550438101001337892027340280771758594588574071478971183972718983265041516060601407237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a24028d1f6f682079cec45bc9c36072ff93f9fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-summit.acumatica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0021c05b71eda061fc5aa970735c6662de9f284badca25bc81f7e69512cf3caf0f5a4c43f24db892ac0676998ec0fc49050f2e85ad3f6ec0efcb9a34a9fbba7f08e4b8584365b5fa1518db64dee16d677af5f0ef8e14391d34087d9965d609790a7c234ba4adddb356b704bd1d81061cabcd73dbd7a81d37b758ece8581fcd4ff2ac3ef138635840c5d29279963323331ad46178cf35c6b4e447b2b30474c79e8f533852dc196b3ff24e284405942142051a02a0aca19bd8932981cbb8f54eca18a2720c9c3e26fdbbb51eb065afe49a454b4f900cba5f8927b005ab98a8b19da3f3ce0b8640a1aa2f5d0c16640bef4c7fd3ec16be096dcd9d72e516e79f1fca09