service.jpn.kdfse.com

- Kodak GmbH -

Issued by TC TrustCenter Class 3 L1 CA V

About this certificate

This digital certificate with serial number 08:8f:00:01:00:02:4a:83:0b:51:88:d7:04:51 was issued on by TC TrustCenter GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DigitalSignature KeyEncipherment] (00000111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)

Kodak GmbH

Organization: Kodak GmbH
Organization unit: Kodak GmbH
State / Province: Baden-Wuerttemberg
Locality: Stuttgart
Country: DE

TC TrustCenter GmbH

Organization: TC TrustCenter GmbH
Organization unit: TC TrustCenter Class 3 L1 CA
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 08:8f:00:01:00:02:4a:83:0b:51:88:d7:04:51
Serial Number (int): 173588905277721245917856960808017
Serial Number lenght: 108 bits, 14 octets

SubjectKeyId: 71:88:da:82:02:f8:31:f6:5b:36:a8:43:8d:e6:7f:be:19:57:de:da
AuthorityKeyId: eb:65:00:87:d6:a0:02:01:aa:1a:d7:53:1e:72:50:6e:68:9c:1b:fe

Fingerprint (sha1): 34:0a:88:10:a6:de:37:c7:f3:82:b3:73:31:45:d7:e2:a6:74:fd:24
Fingerprint (sha256): 04:b6:a4:66:e0:7c:68:72:0d:6f:ed:45:20:b2:84:b6:09:3c:35:ba:84:fe:5c:f7:55:0d:e2:81:d7:a6:dc:95

Issuing Certificate URL: http://www.trustcenter.de/certservices/cacerts/tc_class3_L1_CA_V.crt

Revocation information

OCSP Server: http://ocsp.V.tcclass3.trustcenter.de
CRL Distribution Point: http://www.trustcenter.de/crl/v2/tc_class3_L1_CA_V.crl

Check the revocation status for certificate service.jpn.kdfse.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for service.jpn.kdfse.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name kdfse.com

(limited to 100 certificates)
kiosk-gateway.kdfse.com
service.jpn.kdfse.com
*.test.kdfse.com
images.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.utils.kdfse.com
intra.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.kdfse.com
rome.kdfse.com
service.kdfse.com
*.kdfse.com
vasp.jpn.kdfse.com
store-gateway.kdfse.com
vasp.jpn.kdfse.com
*.kdfse.com
*.test.kdfse.com
admin.kdfse.com
lab-gateway.kdfse.com
*.jpn.kdfse.com
*.kdfse.com
*.kdfse.com
picturecenter.kdfse.com
*.kdfse.com
kdfse.com
*.kdfse.com
feedback.kdfse.com
images.kdfse.com
feedback.kdfse.com
*.utils.kdfse.com
vasp.test.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
kdfse.com
*.dev.kdfse.com
*.dev.kdfse.com
*.apr.kdfse.com
picturecenter.jpn.kdfse.com
vasp.kdfse.com
ws.kdfse.com
service.jpn.kdfse.com
vasp.jpn.kdfse.com
intra.kdfse.com

Certificate

The complete raw certificate details for service.jpn.kdfse.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7tjPXi5rS1j8xVVsdfX5OxdjR
mkXncXr2ZZ+pXHtwWwLkG7D9TNo1xkxBMiTGEV1ooZYbV/R5sjX14xm5DIS/MaHp
i0AlF5x97r3XHe5ONcGMmJkxvy/ZLEgUreXrECLUrksrQvlDwYqdRVEcgiG9hCzX
ruqumcGD8Kj4BxziPwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 173588905277721245917856960808017
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 3 L1 CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 3 L1 CA V'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-07-14 15:48:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-07-15 15:48:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kodak GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kodak GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'service.jpn.kdfse.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 131815658492118966265113646739854985706143596845809130960351058218161293938596788920629042592600606421534836094503234334985042361634795930801399991151061255999171256066116346315371442314160903828464634931534216027845002987787325875582038658810916551568095175404498349813034802559114875041655485318744816542271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.trustcenter.de/certservices/cacerts/tc_class3_L1_CA_V.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.V.tcclass3.trustcenter.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eb650087d6a00201aa1ad7531e72506e689c1bfe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.276.0.44.1.1.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 67 32 84 114 117 115 116 67 101 110 116 101 114 32 67 108 97 115 115 51 32 83 101 114 118 101 114 32 67 101 114 116 105 102 105 99 97 116 101]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.trustcenter.de/guidelines'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7188da8202f831f65b36a8438de67fbe1957deda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.trustcenter.de/crl/v2/tc_class3_L1_CA_V.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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