ProductEnrichmentPortal.belk.com

- Belk, Inc. -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 04:82:57:88:bd:19:21:30:d7:52:ca:18:1d:43:25:54 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Belk, Inc.

Organization: Belk, Inc.
Organization unit: Information Technology
State / Province: North Carolina
Locality: Charlotte
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:82:57:88:bd:19:21:30:d7:52:ca:18:1d:43:25:54
Serial Number (int): 5993685977937857459378908722624669012
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): ce:74:71:47:9e:85:03:e4:03:90:da:36:cc:91:4c:b5:a3:e3:96:c9
Fingerprint (sha256): 07:4d:10:8e:c2:4a:16:8f:22:2a:80:f8:58:fa:ba:08:6b:db:69:64:64:5c:a8:45:82:71:a6:21:43:55:4a:6c

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate ProductEnrichmentPortal.belk.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ProductEnrichmentPortal.belk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ProductEnrichmentPortal.belk.com

Other certificates including the domain name belk.com

(limited to 100 certificates)
coherentpath.link
dns-vetting1-mims-pawel.map.fastly.net
services-stores.belk.com
prospective.shared.global.fastly.net
coherentpath.link
t2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
v2.shared.global.fastly.net
gateway.belk.com
v2.shared.global.fastly.net
z.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
coherentpath.link
pickup.belkdev.com
appdev.belk.com
prospective.shared.global.fastly.net
t2.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
dns-vetting1k.map.fastly.net
link.boitoi.com.bd
z.ssl.fastly.net
www.belk.com
prospective.shared.global.fastly.net
z.ssl.fastly.net
z.ssl.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1k.map.fastly.net
v2.shared.global.fastly.net
t2.shared.global.fastly.net
apiservices.belk.com
appdev.belk.com
rscx.belk.com
newsroom.belk.com
awc.belk.com
services-ecomm-stg.belk.com
coherentpath.link
m.belk.com
z.ssl.fastly.net
v2.shared.global.fastly.net
t2.shared.global.fastly.net
dns-vetting1k.map.fastly.net
coherentpath.link
icarus-talent-sim.shigureaya.me
v2.shared.global.fastly.net
prospective.shared.global.fastly.net
dns-vetting1k.map.fastly.net
vss.belk.com
dns-vetting1i.map.fastly.net
dns-vetting1k.map.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
v2.shared.global.fastly.net
prospective.shared.global.fastly.net
dns-vetting1k.map.fastly.net
ProductEnrichmentPortal.belk.com
www.belk.com
prospective.shared.global.fastly.net
v2.shared.global.fastly.net
appdev.belk.com
dns-vetting1k.map.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
staging.link.awarefy.app
prospective.shared.global.fastly.net
v2.shared.global.fastly.net
v2.shared.global.fastly.net
prospective.shared.global.fastly.net
z.ssl.fastly.net
prospective.shared.global.fastly.net
app.belk.com
wfm.belk.com
dns-vetting1-mims-pawel.map.fastly.net
t2.shared.global.fastly.net
t2.shared.global.fastly.net
v2.shared.global.fastly.net
scx.belk.com
coherentpath.link
prospective.shared.global.fastly.net
z.ssl.fastly.net
ITSERVICES.BELK.COM
prospective.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
z.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
v2.shared.global.fastly.net
t2.shared.global.fastly.net
t2.shared.global.fastly.net
z.ssl.fastly.net
prospective.shared.global.fastly.net
on.belk.com
z.ssl.fastly.net
coherentpath.link
v2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
advisory.belk.com
CARS.BELK.COM

Certificate

The complete raw certificate details for ProductEnrichmentPortal.belk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qHklRaK6ifhx5Va/bBn
+tkD7QNmkkJoFwNnHMZRxO7KPPH0MIE9NJeQKqqvInovqlHeTfAswgvD2kuyvoqY
cA5RZsyMiPKGT9pj6C0PozQ5Y94LUfLpmMT7VM5AgwdOR/K0MeKLNjW1fRTPY8eT
bwv6VxN4afdTgQlYklphKTr4/W95PONj6r2R0S1es2XfZT8UyYFzBN9gNenUoOPU
L7UiEaluajgIZl9s5ptXK7KuafGwRPufIo2Xr7O4Ts/Srm+0aK6ijG3r8Zrb6Lko
VVaPCXnsoCxOjYrCdjb3bkr4PX1DXQcbqaKFQfvX+X+nc2sW6einuBEm6tZ4JTrl
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5993685977937857459378908722624669012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Charlotte'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Belk, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ProductEnrichmentPortal.belk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30124548946257193487232846485705406789132949440936384933041989249489268004278139281912365487773432485103604528899685152317224246420083252503453705967282984400206214780809639808256202330870210806512208532880560002383823414961324584809070115214363292451041109679030046364516278676204697096602372150294183543897863367065541051745834199277423843480500552679145597762692463198600490392497390052679377472111840408457518576073910965537555904566332266759305679080186869001987924353838663224495345013851962599223517211699930524786752577241218171112027503886969716472545689755063559871033854675605211273947126502621545955517751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ProductEnrichmentPortal.belk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0051d875b42ffa57b48b27265aa9d2024e984bd8641a58f94c10d9588c3ed1eaf61a36fbc49b696e77da7184da5e611840183a17d3cec981dc4c12f5bd8b7e82b28a5fc253e9a9e915df338882c9a1c163ac795668d2237014c7195227074b217d8911d607a163aadaa51f7fa06196ed8e7de5ca8346d1a3c1dd105741ebc31229099cc9842677fc6c06c0522ec14382337ab0ed5157df8f79ff885edd9c39a2c33da72efe2a907f8745c169918f3c3cda2c35edf632f2396819f4e83d34e3a99b806047dc56d6867c85cfc777cfc9db49fa271f3ec18d36ec3f187e9ca7178429eba84a3d026373f7459ef775480d5c489fd4d7fa96f2e592eed064c742263953