www.belk.com

- Belk Inc. -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 46:ca:99:73:27:b2:5d:e0:21:41:58:b5:3e:49:dc:3c was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Belk Inc.

Organization: Belk Inc.
Organization unit: Information Technology
State / Province: North Carolina
Locality: Charlotte
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 46:ca:99:73:27:b2:5d:e0:21:41:58:b5:3e:49:dc:3c
Serial Number (int): 94097916002561741623677076738631392316
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 19:68:de:98:88:95:5c:ab:73:d8:66:1d:21:13:a4:b2:65:9c:da:72
Fingerprint (sha256): 07:73:df:ae:f7:a0:3a:2e:44:b4:49:0a:dd:2a:9f:0b:03:4f:c5:1f:b7:69:64:e0:71:ae:e4:59:0d:0f:7a:f1

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.belk.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.belk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.belk.com

Other certificates including the domain name belk.com

(limited to 100 certificates)
coherentpath.link
dns-vetting1-mims-pawel.map.fastly.net
services-stores.belk.com
prospective.shared.global.fastly.net
coherentpath.link
t2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
v2.shared.global.fastly.net
gateway.belk.com
v2.shared.global.fastly.net
z.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
coherentpath.link
pickup.belkdev.com
appdev.belk.com
prospective.shared.global.fastly.net
t2.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
dns-vetting1k.map.fastly.net
link.boitoi.com.bd
z.ssl.fastly.net
www.belk.com
prospective.shared.global.fastly.net
z.ssl.fastly.net
z.ssl.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1k.map.fastly.net
v2.shared.global.fastly.net
t2.shared.global.fastly.net
apiservices.belk.com
appdev.belk.com
rscx.belk.com
newsroom.belk.com
awc.belk.com
services-ecomm-stg.belk.com
coherentpath.link
m.belk.com
z.ssl.fastly.net
v2.shared.global.fastly.net
t2.shared.global.fastly.net
dns-vetting1k.map.fastly.net
coherentpath.link
icarus-talent-sim.shigureaya.me
v2.shared.global.fastly.net
prospective.shared.global.fastly.net
dns-vetting1k.map.fastly.net
vss.belk.com
dns-vetting1i.map.fastly.net
dns-vetting1k.map.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
v2.shared.global.fastly.net
prospective.shared.global.fastly.net
dns-vetting1k.map.fastly.net
ProductEnrichmentPortal.belk.com
www.belk.com
prospective.shared.global.fastly.net
v2.shared.global.fastly.net
appdev.belk.com
dns-vetting1k.map.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
staging.link.awarefy.app
prospective.shared.global.fastly.net
v2.shared.global.fastly.net
v2.shared.global.fastly.net
prospective.shared.global.fastly.net
z.ssl.fastly.net
prospective.shared.global.fastly.net
app.belk.com
wfm.belk.com
dns-vetting1-mims-pawel.map.fastly.net
t2.shared.global.fastly.net
t2.shared.global.fastly.net
v2.shared.global.fastly.net
scx.belk.com
coherentpath.link
prospective.shared.global.fastly.net
z.ssl.fastly.net
ITSERVICES.BELK.COM
prospective.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
z.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
v2.shared.global.fastly.net
t2.shared.global.fastly.net
t2.shared.global.fastly.net
z.ssl.fastly.net
prospective.shared.global.fastly.net
on.belk.com
z.ssl.fastly.net
coherentpath.link
v2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
advisory.belk.com
CARS.BELK.COM

Certificate

The complete raw certificate details for www.belk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAHV2ZjM/0TbbHC4NiJJ
L9F/PP3y4LH908ieJ9BGftxPsrqWPvocP2hAk48IH8lh5/lB1oZ8ipr6qpu+bgnH
L+3BIQo0Nj7Vu5uw2zJ1o6iMoIycoCpoATLJpXJU+zW1zUKarluTui3TD/NcD/4q
GgfgXL+FWN4kQz0o3z/cndF0Bk/lJEi4GUQnvtm9sJESS+aS1fBTtTFHHtQj2Axi
QU2MnOCbxCNNP9qqlap7oVir0AeX3RMmisXFsN70CIWxCHoXsNLGTesw68PId/SX
XmvUzU0EoYxJx6sIRuUoq2wu3Of8DiE3T4OBRiPhpUaPzFSeIVoqIn8xhdZlA+gg
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 94097916002561741623677076738631392316
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Charlotte'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Belk Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.belk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21713893499725571663917531857302019531221092237917081945621987836472223787513325530388281647313355961581241840746140109126696383748437604713377089187378865706493163364435438343614207743577292586564401017993099288019287030921309605217379085900362550023591873273380692962912401747860488381283988698088407676659245956127669439928889515932165974046378999562978519996824343280450638242405843795064547985654387939618485714060525870310874402446812838999033557837764524885439978224258064513036998491951697084408999452978143646794183187508018403238797472551325505817086023714954274590336913172969817434700554308603091509321767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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