api.dev.experience.jaguarlandrover.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:96:21:7f:95:52:09:51:f1:dc:f7:3a:da:10:43:0f was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.dev.experience.jaguarlandrover.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:96:21:7f:95:52:09:51:f1:dc:f7:3a:da:10:43:0f
Serial Number (int): 19388715897475048575129245052436497167
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fe:1c:83:44:d7:54:63:a9:35:07:80:ae:86:bd:26:6a:d3:7d:23:1d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 59:9d:54:7a:83:89:24:d2:06:80:c4:96:02:1d:01:2b:60:b6:19:09
Fingerprint (sha256): 3e:af:f9:82:c7:49:64:f2:ed:02:eb:6d:33:e6:75:1e:72:09:62:00:9b:3f:94:8c:49:14:87:8c:d2:76:2e:f3

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate api.dev.experience.jaguarlandrover.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.dev.experience.jaguarlandrover.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.dev.experience.jaguarlandrover.com

Other certificates including the domain name jaguarlandrover.com

(limited to 100 certificates)
grp-ppd.jaguarlandrover.com
talk.landrover.co.uk
tracking.jaguarusa.com
buysdk.dev.experience.jaguarlandrover.com
login.sso.jaguarlandrover.com
admin.experience.jaguarlandrover.com
jaguarlandrover.com
buysdk.experience.jaguarlandrover.com
api.staging.experience.jaguarlandrover.com
admin.experience.jaguarlandrover.com
digital.jaguarlandrover.com
buysdk.experience.jaguarlandrover.com
dev.sso.jaguarlandrover.com
innovate.jaguarlandrover.com
grp.sso.jaguarlandrover.com
vrportal-production.jlr.connect.agency
stage.sso.jaguarlandrover.com
*.jaguarlandrover.com
grp.jaguarlandrover.com
int-alb.experience.jaguarlandrover.com
jaguarlandrover.com
newsroomcms.jaguarlandrover.com
admin.experience.jaguarlandrover.com
buysdk.dev.experience.jaguarlandrover.com
grp-dev.sso.jaguarlandrover.com
connectadmin.jaguarlandrover.com
qa.sso.jaguarlandrover.com
grp-qa1.jaguarlandrover.com
grp-qa.sso.jaguarlandrover.com
grp.sso.jaguarlandrover.com
grp-qa2.jaguarlandrover.com
rent.jaguarlandrover.com
origin-jlrdxforms.jaguarlandrover.com
fims.jaguarlandrover.com
connect.jaguarlandrover.com
newsroomcms.jaguarlandrover.com
jaguarlandrover.com
grp-stage.sso.jaguarlandrover.com
grp-qa4.jaguarlandrover.com
jaguarlandrover.com
admin.experience.jaguarlandrover.com
www.jaguarlandrover.com
partner.jaguarlandrover.com
int-alb.dev.experience.jaguarlandrover.com
login.sso.jaguarlandrover.com
grp.sso.jaguarlandrover.com
stage.sso.jaguarlandrover.com
admin.experience.jaguarlandrover.com
origin-jlrdxforms.jaguarlandrover.com
jaguarlandrover.com
int-alb.dev.experience.jaguarlandrover.com
teamtalk.jaguarlandrover.com
www.wellbeing.jaguarlandrover.com
api.experience.jaguarlandrover.com
teamtalk.jaguarlandrover.com
stage.sso.jaguarlandrover.com
grp-qa4.jaguarlandrover.com
repository.jaguarlandrover.com
api.dev.experience.jaguarlandrover.com
uag-az2-ext.jaguarlandrover.com
api.experience.jaguarlandrover.com
jlrdxforms.jaguarlandrover.com
admin.staging.experience.jaguarlandrover.com
api.comparison.jaguarlandrover.com
jaguarlandrover.com
int-alb.staging.experience.jaguarlandrover.com
digital.jaguarlandrover.com
grp-qa.sso.jaguarlandrover.com
origin-jlrdxforms.jaguarlandrover.com
buysdk.staging.experience.jaguarlandrover.com
jaguarlandrover.com
grp.jaguarlandrover.com
grp-dev.jaguarlandrover.com
teamtalk.jaguarlandrover.com
teamtalk.jaguarlandrover.com
login.sso.jaguarlandrover.com
grp-qa2.jaguarlandrover.com
admin.staging.experience.jaguarlandrover.com
safetyhealthwellbeing.jaguarlandrover.com
connectadmin.jaguarlandrover.com
connect.jaguarlandrover.com
jaguarlandrover.com
grp-dev.jaguarlandrover.com
grp-qa1.jaguarlandrover.com
int-alb.dev.experience.jaguarlandrover.com
newsroom.jaguarlandrover.com
grp-dev.sso.jaguarlandrover.com
innovate.jaguarlandrover.com
talk.landrover.co.uk
vinlookup.jaguarlandrover.com
digital.jaguarlandrover.com
buysdk.dev.experience.jaguarlandrover.com
ncosadmin.jaguarlandrover.com
teamtalk.jaguarlandrover.com
vrportal-production.jlr.connect.agency
*.int.identity.jaguarlandrover.com
grp-qa1.jaguarlandrover.com
buysdk.experience.jaguarlandrover.com
newsroom.jaguarlandrover.com
stage.sso.jaguarlandrover.com

Certificate

The complete raw certificate details for api.dev.experience.jaguarlandrover.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhccQAiiy8JmDc/qNTW8
80eorP4FkaBWueWSphHMail+LVVDc9PQ1tWTq7JXUycqR0WR2DCmTuJrvMjliY/H
oFQ7ijMjurjadzXr2c1lbm+Y2fgzz7qBMLWKMRHEH+MuIT6VJx126rME91JrKybA
LiiKgKJy97uoLHx4nyVFu+1PL9xUTIWe6H2xhIvdrzwpBl8rZM2796TSof4NuSVN
wwHi2dfYDY0H7AFmR1kH35YSDmnU72CiNXe0foQsJ6McSUcciopaIelkBolOp1R/
f5UU1VGKC/+oFGg2XpjSpo+ERD7qtkSGu0dL34fPejmXmrz1pHO/sibao+lyoMQ4
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19388715897475048575129245052436497167
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.dev.experience.jaguarlandrover.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21471907983579183523307247183104467082602824799884847634756521436763197022107263049020826951750441935025050355186070494102386283284859255167645361336616463037878757316837289047726466006931897308911771820656564866667989741422956806905618320418106292164310371717455480301190080989725767361813711921181831599589474542873957564513262755558673464601154315573395447920423563489966403213561883934484282637584184934177428431016217122626363168071464914287161387922433013164293328432839004744309037652699544064066774826252711580257635939602304177590591460557302318731899951231146903497434712810305954314450648514588171978422521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe1c8344d75463a9350780ae86bd266ad37d231d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dev.experience.jaguarlandrover.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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