tools-catalogue.jaeger-lecoultre.com

- Richemont International SA -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 42:1a:9e:6a:54:47:b7:bd:e0:47:dc:4b:0a:e3:c8:4d was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Richemont International SA

Organization: Richemont International SA
Organization unit: JLC
State / Province: Genève
Locality: Bellevue
Country: CH

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 42:1a:9e:6a:54:47:b7:bd:e0:47:dc:4b:0a:e3:c8:4d
Serial Number (int): 87867260485112398859787574987595171917
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): 03:41:70:44:38:9d:65:a8:fe:db:ad:50:ce:95:e6:a7:fe:43:3a:86
Fingerprint (sha256): 28:9b:c1:65:ff:06:66:55:95:8e:93:77:02:bc:71:91:7d:e0:7d:fa:f1:25:b1:cf:e5:d1:c1:a9:9e:5f:21:b2

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate tools-catalogue.jaeger-lecoultre.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tools-catalogue.jaeger-lecoultre.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tools-catalogue.jaeger-lecoultre.com

Other certificates including the domain name jaeger-lecoultre.com

(limited to 100 certificates)
intranet.richemont.com
intranet.richemont.com
mydocs.quality.jaeger-lecoultre.com
weboutique.quality.vancleefarpels.com
scan.preprod2.cartier.com
ws.jaeger-lecoultre.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
spark.dev.piaget.com
dam.richemont.com
intranet.richemont.com
virtual-museum.quality.jaeger-lecoultre.com
linemedia.preprod.richemont.com
www.jaeger-lecoultre.com
linemedia.preprod.richemont.com
media.richemont.com
www.jaeger-lecoultre.com
mydocs.quality.jaeger-lecoultre.com
ws.jaeger-lecoultre.com
scan.preprod2.cartier.com
intranet.richemont.com
ws.jaeger-lecoultre.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
scan.dev.cartier.com
scan.preprod.jaeger-lecoultre.com
m-contact-form.quality.jaeger-lecoultre.com
akamai-san106.exacttarget.com
intranet.richemont.com
admin.virtual-museum.quality.jaeger-lecoultre.com
www.jaeger-lecoultre.com
www.quality.alange-soehne.com
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
scan.preprod2.cartier.com
admin.virtual-museum.quality.jaeger-lecoultre.com
tools-catalogue.jaeger-lecoultre.com
secure.cn.preprod.jaeger-lecoultre.com
intranet.preprod.richemont.com
api.weboutique.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
m.montblanc.com
linemedia.preprod.richemont.com
m-contact-form.jaeger-lecoultre.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
cloud.email.jaeger-lecoultre.com
media.richemont.com
master2017.jaeger-lecoultre.com
scan.dev.cartier.com
secure-preprod-store.jaeger-lecoultre.com
admin.virtual-museum.jaeger-lecoultre.com
linemedia.preprod.richemont.com
www.jaeger-lecoultre.com
weboutique.preprod.vancleefarpels.com
virtual-museum.quality.jaeger-lecoultre.com
www.quality.alange-soehne.com
m-contact-form.jaeger-lecoultre.com
cartiercare.preprod2.cartier.com
intranet.staging.richemont.com
spark.preprod.piaget.com
www.quality.alange-soehne.com
secure-store.jaeger-lecoultre.com
m-contact-form.jaeger-lecoultre.com
akamai-san106.exacttarget.com
spark.dev.piaget.com
scan.dev2.cartier.com
secure-store.jaeger-lecoultre.com
intranet.quality.richemont.com
weboutique.dev.vancleefarpels.com
baume-et-mercier.ae
intranet.dev.richemont.com
tools-catalogue.jaeger-lecoultre.com
virtual-museum.quality.jaeger-lecoultre.com
scan.cartier.com
m.montblanc.com
master2017.jaeger-lecoultre.com
intranet.staging.richemont.com
scan.preprod.cartier.com
vcs.richemont.com
www.jaeger-lecoultre.com
admin.virtual-museum.jaeger-lecoultre.com
m.montblanc.com
intranet.richemont.com
linemedia.preprod.richemont.com
press.jaeger-lecoultre.com
www.quality.alange-soehne.com
scan.preprod2.cartier.com
intranet.dev.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
scan.dev2.cartier.com
dam.richemont.com
press.jaeger-lecoultre.com
scan.dev2.cartier.com
mydocs.quality.jaeger-lecoultre.com

Certificate

The complete raw certificate details for tools-catalogue.jaeger-lecoultre.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugzVVDRVfvVKPJ/a+wqs
nTzS1Hrke/axF/AMAf3QR4K4HaCIxe5vzuJDjk4aVCh/FO+WnyCoTA2fkCwUzLVa
7yomsI9VShECZYCXGgTjawjxxFqte4D2rcV+Qi0VNDPyfyo99scc2TCL6vqLzD6n
xxy6RqJkfSVxbyvz4Vf7Hw/kMgo5+8hWVkzqManscN0F7Gb7t7kIS/ddUZnHnCEf
r6xaw2l6RwmSE2D3omWifxyZ74/XWkDXm7Da0BYX90rAQ9A/le3o3jvmW870128T
fR4GzjeI/FCn70hAbY9+XH/Uxpz/SfgmhIh/kcP2gAnrQjS/4fmmXsYgTgXLK3iy
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87867260485112398859787574987595171917
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'JLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'tools-catalogue.jaeger-lecoultre.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23486653067720187660931877524820664060955437316093053448132856747572835614878456211119788260566275084492588422373912599074858481098467031726592922284800757240134100668047104848812957091327331821638734523629844854200682796818487483401520651638778090842258234287902819485278315793104495086617764141110450004929926585147612216070581250418544061789047631071963335082797475867296082744089385402405764159389246576849779727215299066361763055433985934486734483042623190186094272021685529276501345953646816116068919244544531101793059327072478041624176810925053173496207492798965249460097991467951832065240076053575676036952737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools-catalogue.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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