jaguarlandroverbrand.jlrext.com

- Jaguar Land Rover Limited -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 68:17:db:c6:5a:78:20:32:62:83:4d:59 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jaguar Land Rover Limited

Organization: Jaguar Land Rover Limited
State / Province: West Midlands
Locality: Coventry
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 68:17:db:c6:5a:78:20:32:62:83:4d:59
Serial Number (int): 32215284172505094526580510041
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 22:0d:3d:34:9a:ba:1a:a4:ff:73:d1:1f:10:64:c0:b9:44:db:47:0b
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 55:8d:be:0f:ad:c5:cb:3b:3f:fc:d3:b4:02:b1:b6:f8:20:94:b0:3c
Fingerprint (sha256): 19:8c:d9:0f:da:c5:b4:c8:1f:3c:c6:f2:fc:1a:d9:ba:43:f4:b7:dd:fd:96:fb:01:f1:e8:c2:7a:81:16:4f:78

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate jaguarlandroverbrand.jlrext.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jaguarlandroverbrand.jlrext.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jaguarlandroverbrand.jlrext.com

Other certificates including the domain name jlrext.com

(limited to 100 certificates)
jlrvision.jlrext.com
stage-customerservice.jlrext.com
*.jlrext.com
web.qprqa.jlrext.com
retailer-assessment.jlrext.com
salesforcevsa.jlrext.com
topix.features.jlrext.com
www.aspenrms.com
srpss.jlrext.com
access.jlrext.com
mftl-qa.jlrext.com
web.epay.jlrext.com
bbsssm.jlrext.com
special-tools-qa.jlrext.com
*.jlrext.com
mftl.jlrext.com
*.jlrext.com
connect-cn.jlrext.com
www.webquote.jlrext.com
www.dcsext.jlrext.com
www.dcsext.jlrext.com
www.portal.jlrext.com
monroney.jlrext.com
jlrsp.jlrext.com
www.madcap.jlrext.com
web.cmmseddl-pr.jlrext.com
premierdocstest.jlrext.com
peg.bbss.jlrext.com
premierdocstest.jlrext.com
*.jlrext.com
www.lradvertising.jlrext.com
www.efdvs.jlrext.com
gcmservices.jlrext.com
jlrportalqajpc.jlrext.com
jaguarvehicles.jlrext.com
bbssqajpc.jlrext.com
aftermarket-ewm.jlrext.com
www.wslx.jlrext.com
retailer-database.jlrext.com
retailer-database.jlrext.com
www.webquote.jlrext.com
topix.jlrext.com
jaguarlandroverhub.jlrext.com
www.aspenrms.com
topixqa2.landrover.jlrext.com
pridepinnacle.jlrext.com
www.secureauthx.jlrext.com
www.nguams.jlrext.com
www.aspenrms.com
pridepinnacle.jlrext.com
www.aspenrms.com
web.qpr.jlrext.com
sps.jlrext.com
topixqa2.jlrext.com
retailer-database.jlrext.com
sps.jlrext.com
www.jaguarcreativepartners.jlrext.com
paws.jlrext.com
*.jlrext.com
jlrassuranttest.jlrext.com
webconnect.jlrext.com
jlrdocusedit.jlrext.com
www.gpirs-ddl.jlrext.com
dealerleads.jlrext.com
*.jlrext.com
jlrassurant.jlrext.com
paws.jlrint.com
topixqa2.jlrext.com
web.c3p.jlrext.com
journey.jlrext.com
mft.jlrext.com
sta-grms.jlrext.com
www.jlrvista.jlrext.com
myvpn.jlrext.com
premierdocs.jlrext.com
connect-cn.jlrext.com
www.dcsext.jlrext.com
sef.jlrext.com
jaguarlandroverhub.jlrext.com
jaguarlandroverbrand.jlrext.com
web.cmmseddl-pr.jlrext.com
dealerportalpp-cn.jlrext.com
special-tools-qa.jlrext.com
web.aim.jlrint.com
www.jlrvista.jlrext.com
ecar.jlrext.com
www.d42.jlrext.com
webconnect.jlrext.com
www.pd-rm.jlrext.com
www.secureauthx.jlrext.com
qa-wslx.jlrext.com
rmdv.jlrext.com
stage-esi.jlrext.com
wwwqa.jagcoopgrms.jlrext.com
iplm-training.jlrext.com
www.wslx.jlrext.com
www.gpirs-ddl.jlrext.com
svcrm.jlrext.com
www.efdvs.jlrext.com
web.sfq.jlrext.com

Certificate

The complete raw certificate details for jaguarlandroverbrand.jlrext.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGC89nVgJxMCcVL5XZbt
krJXbXbvfIlyb9PXsy06PMAI+OyIpX5h709R0dvGjOoagqMZmV8Qyrdc/+LxloGp
7gf/GFoShCupHUFih+hQl8NgzdDDxdGQ975jcUs+k9qnnM+N+MN0Yd5vkV2Ky4k/
QK30xpVNQ3pCLLexHb3QESMBnlVh3lAV12x9/Bx91Se4VaAB81QCOw6PfbT0JxJq
V5UdTU5hlPlhR+IwuXYcWG7PYYAti8g7RiYXYTFtEotqvHS7Clklrd21h41ZAKRV
d8e1eQphyGnQB2XfpEe7cyeAJ9s33Ju1fwJa9/WIWVTzWq5Or54SblWYp8GKbWZo
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32215284172505094526580510041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 08:41:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-25 07:16:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Midlands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coventry'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jaguar Land Rover Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jaguarlandroverbrand.jlrext.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21255738586919226912433576038579727658915777655855145085350541413250562118223401209364741160519354752613065160434060852929982971835060047588143572247604321821143485693137235304457964783164759681221964542848187592523669222762277017386518241673799198050162075738006604761361785337433176027035547317399238843942222483604511146488795074153066467691044198335210815492294482166843189396474053732650326659429977829979076792717372326098376935543839245455425683394676955635917652676979305911062875129377006478347527050087167782240228637102840508278556895682730304797118866035340631477145526426667472206203665078989022776682623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaguarlandroverbrand.jlrext.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							220d3d349aba1aa4ff73d11f1064c0b944db470b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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