gear.landrover.com

- Jaguar Land Rover Limited -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 1a:04:b7:9d:b6:f7:86:d5:64:8b:57:7b was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jaguar Land Rover Limited

Organization: Jaguar Land Rover Limited
State / Province: West Midlands
Locality: Coventry
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:04:b7:9d:b6:f7:86:d5:64:8b:57:7b
Serial Number (int): 8052313061022769706240268155
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: c6:10:81:fa:c0:98:01:d5:9f:56:ee:39:64:91:9d:23:14:80:3e:7f
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): b1:06:27:c5:a7:3e:50:d7:3d:5f:64:b8:dd:1f:ab:43:72:2d:25:c5
Fingerprint (sha256): 17:98:fb:c1:87:6e:29:f1:1b:7f:55:ea:79:f4:6f:39:28:a3:4d:8f:8d:12:bd:49:7d:82:64:d8:d4:51:16:de

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate gear.landrover.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gear.landrover.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gear.landrover.com
www.gear.landrover.com

Other certificates including the domain name landrover.com

(limited to 100 certificates)
bosnia.jaguar.com
www.experience.landrover.com
magazin.peak-muenster.de
qaforms.landrover.com
catalogues.meister.com
kiosk.greater.sydney
www.experience.landrover.com
magazine.landroverusa.com
training.landrover.com
www.hochseescheinkurs.online
approved.lt.landrover.com
dominicanrepublic.landrover.com
qaforms.landrover.com
www.landrover.com
www.landrover.com
online-katalog.baude.com
origin-lrdxforms.landrover.com
approved.ie.landrover.com
lemagazine.landrover.com
e-paper.moinmoin.de
apps.us.landrover.com
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
apps.us.landrover.com
lrccaw.live.incontrol.landrover.com
journal.flyskywork.com
www.landrover.com
www.landrover.com
bolivia.jaguar.com
admin.experience.landrover.com
moebel-boeck.mediaflip.de
publikationen.kreis-goerlitz.de
www.landrover.com
www.landrover.com
pim.incontrol.landrover.com
approved.cy.landrover.com
chile.jaguar.com
catalog.sogears.com
*.landrover.com
approved.gi.landrover.com
approved.br.landrover.com
prospekte.intersport.de
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
shop.landrover.com
incontrol.landrover.com
ecuador.landrover.com
albania.jaguar.com
www.landrover.com
approved.lk.landrover.com
lrccaw.incontrol.landrover.com
experience.landrover.com
online-katalog.baude.com
topixqa2.landrover.jlrext.com
epaper.glasmarte.at
*.landrover.com
smetrics.landrover.com
magazine.landrover.com.cn
approved.ro.landrover.com
kataloge.quester.at
www.jaguar.gt
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
apps.us.landrover.com
training.landrover.com
wwwqa.ownerinfo.jaguar.com
approved.id.landrover.com
www.landrover.com
webkiosk.mvz-atrium.de
kiosk.greater.sydney
www.landrover.com
www.landrover.com
ecuador.landrover.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
jaguarlandrover.com
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
gear.landrover.com
webkiosk.baeckereibuettner.de
online-katalog.baude.com
oshqa.jaguar.com
www.jaguar.gt
www.landrover.com
blaetterkatalog.rp-media.de
bibliothek.bregenzerfestspiele.com
search.accessories.landrover.com
apps.us.landrover.com
katalog.ud-shop.de
webkiosk.mvz-atrium.de
www.landrover.com
albania.jaguar.com
kiosk.greater.sydney
approved.jp.landrover.com
www.landrover.com
osh.jaguar.com
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus

Certificate

The complete raw certificate details for gear.landrover.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgHFW17vkrZ4OVLDI9bw
dAKuS+pmxt7VhJz5pDxqWpTayrLe2YXddoZ+1KfT8Q/kCGvlM8FVCt5t4cNJD5Ya
egVAT9GcF/bZXC8TNUVWMLOflaOXbVBxD200I6b0C1PVsxifkIcX87sV2GLRdDeD
g3M6L/cdln0P149x7oLFYgc6kMWaEpjDnqqv1VxXhMeifuDJKR4ZAwAd+4ZaIbQa
NXUeP+ZjDHv/nUcVsFNrsjazcNuBTcTr7xgUGc9aaAB1o0sgdpxPVff93Nlkazxa
iN9fusqC5DgiYKYgxul4sQlYn9I6d6t58umFQj/H80B5kC60GyCjKx9Z6TdF1IL7
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8052313061022769706240268155
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 09:07:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-24 12:46:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Midlands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coventry'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jaguar Land Rover Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gear.landrover.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26005964098899061888545921911478087806085254089692165212371605123832109561445072373117016894453738536566934410421793912704634929084846925113660558730725376460102437372762322812953164599691731974835027675551586583936354034264714559889282220230327894401489363619012872719354620757669728997548118221230945693364144427108329085517557124267560471986504159387240459924551996147203704171749545005209556140500282744758841532048868020617356483122878987881749221554074657212537673222809753324936709504457838344984456982722198229664728478863859507788112922281583228424717187926333904037712484520074743393435961391067480379816749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gear.landrover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gear.landrover.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c61081fac09801d59f56ee3964919d2314803e7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b9682c6fcc17923b45ea5e1e28128921445cdcf2f1f49221cf0d40f56b52fe94abfcbe2c3ddf7a30e99e651ceda9d8afa6e7e7120b72c0dbc04bac6c296dabf511ecb2d49be4c62d2144747bdb295e374d9625ce03c5ad844bbc8dd25084b9538c53752175b400a01f28199a484f900b7df35f05e80f9bb50d64662105e1dbe940e2ffc5cea79bc26650f11d3db0b75b26af29477b593278b1ec07de28dda58a328ddc9ea68c05310702cd8b3f5d1db307da7789805bcb6e0665c425adbec5dd952bbd323cf13cc1eda9b13aa3f37d47a574de8be31ef457357f80acc75da408d3aa4594714fb700db68f194c19bd36df05dd7551a48b2aa9ead22bf31bd613d