training.landrover.com

- Jaguar Land Rover Limited -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 24:cf:76:df:39:01:a8:cd:e9:0b:62:d3 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jaguar Land Rover Limited

Organization: Jaguar Land Rover Limited
State / Province: West Midlands
Locality: Coventry
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 24:cf:76:df:39:01:a8:cd:e9:0b:62:d3
Serial Number (int): 11392269355205307706091725523
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: ba:13:1c:53:cf:ab:fc:36:81:87:bb:31:a2:1d:a6:27:53:dd:a0:6a
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 4b:ea:67:3b:77:05:3e:ab:ad:4b:d3:52:12:6b:90:af:48:92:c7:b3
Fingerprint (sha256): 02:81:88:2a:3a:64:3b:fa:5a:3f:66:8b:26:8e:df:c2:48:5b:1e:2a:41:2d:05:b1:f0:ca:5d:14:8b:1f:0f:94

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate training.landrover.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for training.landrover.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

training.landrover.com

Other certificates including the domain name landrover.com

(limited to 100 certificates)
bosnia.jaguar.com
www.experience.landrover.com
magazin.peak-muenster.de
qaforms.landrover.com
catalogues.meister.com
kiosk.greater.sydney
www.experience.landrover.com
magazine.landroverusa.com
training.landrover.com
www.hochseescheinkurs.online
approved.lt.landrover.com
dominicanrepublic.landrover.com
qaforms.landrover.com
www.landrover.com
www.landrover.com
online-katalog.baude.com
origin-lrdxforms.landrover.com
approved.ie.landrover.com
lemagazine.landrover.com
e-paper.moinmoin.de
apps.us.landrover.com
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
apps.us.landrover.com
lrccaw.live.incontrol.landrover.com
journal.flyskywork.com
www.landrover.com
www.landrover.com
bolivia.jaguar.com
admin.experience.landrover.com
moebel-boeck.mediaflip.de
publikationen.kreis-goerlitz.de
www.landrover.com
www.landrover.com
pim.incontrol.landrover.com
approved.cy.landrover.com
chile.jaguar.com
catalog.sogears.com
*.landrover.com
approved.gi.landrover.com
approved.br.landrover.com
prospekte.intersport.de
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
shop.landrover.com
incontrol.landrover.com
ecuador.landrover.com
albania.jaguar.com
www.landrover.com
approved.lk.landrover.com
lrccaw.incontrol.landrover.com
experience.landrover.com
online-katalog.baude.com
topixqa2.landrover.jlrext.com
epaper.glasmarte.at
*.landrover.com
smetrics.landrover.com
magazine.landrover.com.cn
approved.ro.landrover.com
kataloge.quester.at
www.jaguar.gt
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
apps.us.landrover.com
training.landrover.com
wwwqa.ownerinfo.jaguar.com
approved.id.landrover.com
www.landrover.com
webkiosk.mvz-atrium.de
kiosk.greater.sydney
www.landrover.com
www.landrover.com
ecuador.landrover.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
jaguarlandrover.com
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
gear.landrover.com
webkiosk.baeckereibuettner.de
online-katalog.baude.com
oshqa.jaguar.com
www.jaguar.gt
www.landrover.com
blaetterkatalog.rp-media.de
bibliothek.bregenzerfestspiele.com
search.accessories.landrover.com
apps.us.landrover.com
katalog.ud-shop.de
webkiosk.mvz-atrium.de
www.landrover.com
albania.jaguar.com
kiosk.greater.sydney
approved.jp.landrover.com
www.landrover.com
osh.jaguar.com
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus

Certificate

The complete raw certificate details for training.landrover.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Lx+mCGAwC1cWj5Fe5Q
ILTF1XIbDQpbR+51xV48IM7k7ZhvSZT18P5UJ7U28zlKAfwPUbZUhyKCBpCFiIfl
zhlkcN8kzwTgl7h0kSHbMX4gCgyPhMJ7Zj8eNUcX4CW+45JVrXbShyq1WZ1paDnI
uyCRQbuUepBVrBwKQ1f8bOiI9g+KaQxSTRH3GU4b0RIti/sRuTMHdP884TMvIWZ5
xLppQeOwvAoc+Tcme4IobXUqhZZxTPWL/UMN4mxMD4T0FGXbssyH8VLchKgVQqsi
4UAQsKbBIQb8RVsPj/HUZWs0FaHjlAmEkB4UNjNDuJv/E03nxLwI7TkR/jq+cDnD
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11392269355205307706091725523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-01 13:16:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-01 13:46:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Midlands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coventry'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jaguar Land Rover Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'training.landrover.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22629668510581686203641094153860323644771387691819970962957441987953635130447210478440953395467209285406743199383015960996179000171784276199264155188683395682989575155713996409922359170813289853128638913281749957960846731599834106803337772149516491462871874271496773013574079358928690375766576746805098126487257535086295007042545340554540769783661438366565738811555949243805640982154513437491839029665584730524570571391359632199963098804937885045991912347962327189455263775850845277288817034818546432318877224984226734860133833730290448671503343892633071726371867139354019810136381831591584600188624594391126605677443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.landrover.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba131c53cfabfc368187bb31a21da62753dda06a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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