www.wslx.jlrext.com

- Jaguar Land Rover Limited -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 77:71:ca:f3:6d:ad:00:3c:bf:0f:12:24 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jaguar Land Rover Limited

Organization: Jaguar Land Rover Limited
State / Province: West Midlands
Locality: Coventry
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 77:71:ca:f3:6d:ad:00:3c:bf:0f:12:24
Serial Number (int): 36966283194847839036753515044
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 74:ab:8c:ef:49:7a:10:9d:1f:30:da:30:b5:31:77:a6:78:33:bd:6a
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): f4:2c:c1:a0:cb:f0:a9:e0:67:1a:a1:67:c7:90:de:4c:fc:d2:48:c0
Fingerprint (sha256): 1d:b9:b9:91:59:f3:a4:5a:b0:69:72:7e:62:35:cf:2d:2c:ad:d7:fd:88:21:f7:a3:7b:ba:22:22:b1:52:cf:87

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate www.wslx.jlrext.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wslx.jlrext.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.wslx.jlrext.com

Other certificates including the domain name jlrext.com

(limited to 100 certificates)
jlrvision.jlrext.com
stage-customerservice.jlrext.com
*.jlrext.com
web.qprqa.jlrext.com
retailer-assessment.jlrext.com
salesforcevsa.jlrext.com
topix.features.jlrext.com
www.aspenrms.com
srpss.jlrext.com
access.jlrext.com
mftl-qa.jlrext.com
web.epay.jlrext.com
bbsssm.jlrext.com
special-tools-qa.jlrext.com
*.jlrext.com
mftl.jlrext.com
*.jlrext.com
connect-cn.jlrext.com
www.webquote.jlrext.com
www.dcsext.jlrext.com
www.dcsext.jlrext.com
www.portal.jlrext.com
monroney.jlrext.com
jlrsp.jlrext.com
www.madcap.jlrext.com
web.cmmseddl-pr.jlrext.com
premierdocstest.jlrext.com
peg.bbss.jlrext.com
premierdocstest.jlrext.com
*.jlrext.com
www.lradvertising.jlrext.com
www.efdvs.jlrext.com
gcmservices.jlrext.com
jlrportalqajpc.jlrext.com
jaguarvehicles.jlrext.com
bbssqajpc.jlrext.com
aftermarket-ewm.jlrext.com
www.wslx.jlrext.com
retailer-database.jlrext.com
retailer-database.jlrext.com
www.webquote.jlrext.com
topix.jlrext.com
jaguarlandroverhub.jlrext.com
www.aspenrms.com
topixqa2.landrover.jlrext.com
pridepinnacle.jlrext.com
www.secureauthx.jlrext.com
www.nguams.jlrext.com
www.aspenrms.com
pridepinnacle.jlrext.com
www.aspenrms.com
web.qpr.jlrext.com
sps.jlrext.com
topixqa2.jlrext.com
retailer-database.jlrext.com
sps.jlrext.com
www.jaguarcreativepartners.jlrext.com
paws.jlrext.com
*.jlrext.com
jlrassuranttest.jlrext.com
webconnect.jlrext.com
jlrdocusedit.jlrext.com
www.gpirs-ddl.jlrext.com
dealerleads.jlrext.com
*.jlrext.com
jlrassurant.jlrext.com
paws.jlrint.com
topixqa2.jlrext.com
web.c3p.jlrext.com
journey.jlrext.com
mft.jlrext.com
sta-grms.jlrext.com
www.jlrvista.jlrext.com
myvpn.jlrext.com
premierdocs.jlrext.com
connect-cn.jlrext.com
www.dcsext.jlrext.com
sef.jlrext.com
jaguarlandroverhub.jlrext.com
jaguarlandroverbrand.jlrext.com
web.cmmseddl-pr.jlrext.com
dealerportalpp-cn.jlrext.com
special-tools-qa.jlrext.com
web.aim.jlrint.com
www.jlrvista.jlrext.com
ecar.jlrext.com
www.d42.jlrext.com
webconnect.jlrext.com
www.pd-rm.jlrext.com
www.secureauthx.jlrext.com
qa-wslx.jlrext.com
rmdv.jlrext.com
stage-esi.jlrext.com
wwwqa.jagcoopgrms.jlrext.com
iplm-training.jlrext.com
www.wslx.jlrext.com
www.gpirs-ddl.jlrext.com
svcrm.jlrext.com
www.efdvs.jlrext.com
web.sfq.jlrext.com

Certificate

The complete raw certificate details for www.wslx.jlrext.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qQvYPvLEzsldaYk/NKh
vocGfVFfsl2nG+tFFwkWa6YSR2dl6N9XhZ0hbrdvXqKP9oLTQqNdgVvzQdTckkjY
4ih7QwR3BVHD1WpyKXbluIIlE7FwrLAdWPl9IquRBepKBH6fDo2A4Kj1QmxpURVn
dlZ9PR2JZ4JW0VgvJt4cMJa0NAcdlvhoacOB6uVkHTFff/i5kxs4PtXW6IbY9xGd
sOjEVtAs2IPOQ3uUb+CBNYRevgUcUjfSfoj5zQIwKVhimAbshdPdqtqVxMjfyEpx
/pc0k1QKuEH8uB/4+oT1DUx7UpnExmHns5rBSKLIZxUhRx4ztC0F3j+Nbzo6GA8m
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36966283194847839036753515044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 13:56:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-12 09:25:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Midlands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coventry'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jaguar Land Rover Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wslx.jlrext.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28610819599642602345693594673077976893663801502200919382952373374006763508218751159185768140561576406937863141836244017270721787180816011738515698201651426919391117973909383904883201372453786917681970711517367696808763298308471994887234385331701463389945983441932800028459468824305937039882236620889402251612992666495553975022608655730013178250610205496200980029878604566816534925833144824865237246086187489984963478668799068116853617464234464501411980186649404166950930742503398915556125728868727158502674751440794173488970721529435858632477248915021590575833280546921408136621540790286607176830546466963614847673863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wslx.jlrext.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74ab8cef497a109d1f30da30b53177a67833bd6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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