premierdocstest.jlrext.com

- Jaguar Land Rover Limited -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 03:7d:ea:d7:bd:ae:8d:c1:e4:c8:c9:07 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jaguar Land Rover Limited

Organization: Jaguar Land Rover Limited
State / Province: West Midlands
Locality: Coventry
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7d:ea:d7:bd:ae:8d:c1:e4:c8:c9:07
Serial Number (int): 1080679770390848980568819975
Serial Number lenght: 90 bits, 12 octets

SubjectKeyId: 34:77:c1:65:a0:a6:8d:e3:76:f7:52:21:3b:fc:ec:f4:15:cb:31:be
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): a1:36:da:6a:e3:1a:f6:45:38:02:37:6f:b7:8d:2f:fe:9a:96:15:03
Fingerprint (sha256): 0a:d4:d4:29:63:18:2e:33:4e:70:69:60:88:2b:aa:da:ef:e7:0f:7b:d9:fd:7f:e7:b9:a2:07:e6:ad:30:c0:9b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate premierdocstest.jlrext.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for premierdocstest.jlrext.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

premierdocstest.jlrext.com

Other certificates including the domain name jlrext.com

(limited to 100 certificates)
jlrvision.jlrext.com
stage-customerservice.jlrext.com
*.jlrext.com
web.qprqa.jlrext.com
retailer-assessment.jlrext.com
salesforcevsa.jlrext.com
topix.features.jlrext.com
www.aspenrms.com
srpss.jlrext.com
access.jlrext.com
mftl-qa.jlrext.com
web.epay.jlrext.com
bbsssm.jlrext.com
special-tools-qa.jlrext.com
*.jlrext.com
mftl.jlrext.com
*.jlrext.com
connect-cn.jlrext.com
www.webquote.jlrext.com
www.dcsext.jlrext.com
www.dcsext.jlrext.com
www.portal.jlrext.com
monroney.jlrext.com
jlrsp.jlrext.com
www.madcap.jlrext.com
web.cmmseddl-pr.jlrext.com
premierdocstest.jlrext.com
peg.bbss.jlrext.com
premierdocstest.jlrext.com
*.jlrext.com
www.lradvertising.jlrext.com
www.efdvs.jlrext.com
gcmservices.jlrext.com
jlrportalqajpc.jlrext.com
jaguarvehicles.jlrext.com
bbssqajpc.jlrext.com
aftermarket-ewm.jlrext.com
www.wslx.jlrext.com
retailer-database.jlrext.com
retailer-database.jlrext.com
www.webquote.jlrext.com
topix.jlrext.com
jaguarlandroverhub.jlrext.com
www.aspenrms.com
topixqa2.landrover.jlrext.com
pridepinnacle.jlrext.com
www.secureauthx.jlrext.com
www.nguams.jlrext.com
www.aspenrms.com
pridepinnacle.jlrext.com
www.aspenrms.com
web.qpr.jlrext.com
sps.jlrext.com
topixqa2.jlrext.com
retailer-database.jlrext.com
sps.jlrext.com
www.jaguarcreativepartners.jlrext.com
paws.jlrext.com
*.jlrext.com
jlrassuranttest.jlrext.com
webconnect.jlrext.com
jlrdocusedit.jlrext.com
www.gpirs-ddl.jlrext.com
dealerleads.jlrext.com
*.jlrext.com
jlrassurant.jlrext.com
paws.jlrint.com
topixqa2.jlrext.com
web.c3p.jlrext.com
journey.jlrext.com
mft.jlrext.com
sta-grms.jlrext.com
www.jlrvista.jlrext.com
myvpn.jlrext.com
premierdocs.jlrext.com
connect-cn.jlrext.com
www.dcsext.jlrext.com
sef.jlrext.com
jaguarlandroverhub.jlrext.com
jaguarlandroverbrand.jlrext.com
web.cmmseddl-pr.jlrext.com
dealerportalpp-cn.jlrext.com
special-tools-qa.jlrext.com
web.aim.jlrint.com
www.jlrvista.jlrext.com
ecar.jlrext.com
www.d42.jlrext.com
webconnect.jlrext.com
www.pd-rm.jlrext.com
www.secureauthx.jlrext.com
qa-wslx.jlrext.com
rmdv.jlrext.com
stage-esi.jlrext.com
wwwqa.jagcoopgrms.jlrext.com
iplm-training.jlrext.com
www.wslx.jlrext.com
www.gpirs-ddl.jlrext.com
svcrm.jlrext.com
www.efdvs.jlrext.com
web.sfq.jlrext.com

Certificate

The complete raw certificate details for premierdocstest.jlrext.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+t4ULpQkh9AO4tDHCuo
IQxTjJKwOIoXuGW++MMkIWdfbmJKtiZ4V8/UpBCMbC+NJ0ve5Fgqsq3a+O215FGY
QZxGsx01FPvbgXui/OhyBOPFi9LSznc38hNypEToAZ+j/D9nNQnmrAwmY5pWSV4S
gpY04wUeisQbagQvVFXeNDnMK8LOQxwOjm3Zi+pJoR7hZ2vgYkjR7SRETqzFfrXv
QU2GkQo7/ix8woEB8St6g3078ZqvgyRXgJrnThxxglqyQzUFS1OXOVf674wdzqyv
V4xlWK3HnJyTMBLbWEaViLEQtxICBZpZgM6tJz/48GqJBIwrwq8RnuAE6ok7FMKi
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1080679770390848980568819975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 13:36:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-10 15:55:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Midlands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coventry'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jaguar Land Rover Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'premierdocstest.jlrext.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23217724384467925319405450643413835076856630960873023982286640089520099318275970855631597215447985437018760812261706524481352679794383369230124149048713377940499769334421464185122392382966412594917144916842773269769279401721634223674516155775850454232793666959992333919309123962966432994280439967572412142785063394061161175323809676116273271627159706971800656640159921823049468137559751251273268329292796970676660603261631967108520109652824385808212700744218617126252352528728443090951476356600663537917433998730125961461165627843096509862848771679527796275518489739292991002205586601473611483872583310747256859304607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premierdocstest.jlrext.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3477c165a0a68de376f752213bfcecf415cb31be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00997bcdba92b0476bd4ed3a0e91e71b6062ec251a6ee0526694f1e71943beb59ab234b8fd150c051712c0951251498b3d7305c0587ce28c4403db383b65ae3f9235bd3b9d30b6d01f9537df047fdd84cbfb3b2e293aa2107db5ec874ad119ea5520662fcb23258dcfd763a94e48c1fba9e83d9f9898a86085b789b436f9648b2226af3ea574739dd598134b92cd92048be8b6fa73eb34aa9fea34cd0e24f9a90da23687ae98b2a526f59ffecf0b65afd0b6f478c90926ed2754c677ddd916f958dc24592170f228babca27459407a53d8c16c680bd3d0f54d7c3a194caf96f00c36e77d158f6dc5a03ea1d09ff30837db6c1a3184be5013748b2110a6717bb68f