admin.staging.experience.jaguarlandrover.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:2f:b0:06:25:64:5d:ae:64:70:43:50:b1:1e:82:5f was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.staging.experience.jaguarlandrover.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:2f:b0:06:25:64:5d:ae:64:70:43:50:b1:1e:82:5f
Serial Number (int): 10881432109661962003756994864992911967
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f2:bf:f0:ec:22:65:b7:d8:52:aa:cf:37:b7:e4:e3:13:d7:af:ca:95
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 7c:89:37:4a:1f:99:64:14:c2:95:10:29:9f:48:c0:f4:a7:16:29:23
Fingerprint (sha256): 42:2b:68:39:b9:ec:b1:f0:a1:8c:1f:ab:4e:8a:26:0b:71:b8:51:2b:bd:75:d3:d1:c0:e4:a4:a8:84:7d:ec:06

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate admin.staging.experience.jaguarlandrover.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.staging.experience.jaguarlandrover.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.staging.experience.jaguarlandrover.com

Other certificates including the domain name jaguarlandrover.com

(limited to 100 certificates)
grp-ppd.jaguarlandrover.com
talk.landrover.co.uk
tracking.jaguarusa.com
buysdk.dev.experience.jaguarlandrover.com
login.sso.jaguarlandrover.com
admin.experience.jaguarlandrover.com
jaguarlandrover.com
buysdk.experience.jaguarlandrover.com
api.staging.experience.jaguarlandrover.com
admin.experience.jaguarlandrover.com
digital.jaguarlandrover.com
buysdk.experience.jaguarlandrover.com
dev.sso.jaguarlandrover.com
innovate.jaguarlandrover.com
grp.sso.jaguarlandrover.com
vrportal-production.jlr.connect.agency
stage.sso.jaguarlandrover.com
*.jaguarlandrover.com
grp.jaguarlandrover.com
int-alb.experience.jaguarlandrover.com
jaguarlandrover.com
newsroomcms.jaguarlandrover.com
admin.experience.jaguarlandrover.com
buysdk.dev.experience.jaguarlandrover.com
grp-dev.sso.jaguarlandrover.com
connectadmin.jaguarlandrover.com
qa.sso.jaguarlandrover.com
grp-qa1.jaguarlandrover.com
grp-qa.sso.jaguarlandrover.com
grp.sso.jaguarlandrover.com
grp-qa2.jaguarlandrover.com
rent.jaguarlandrover.com
origin-jlrdxforms.jaguarlandrover.com
fims.jaguarlandrover.com
connect.jaguarlandrover.com
newsroomcms.jaguarlandrover.com
jaguarlandrover.com
grp-stage.sso.jaguarlandrover.com
grp-qa4.jaguarlandrover.com
jaguarlandrover.com
admin.experience.jaguarlandrover.com
www.jaguarlandrover.com
partner.jaguarlandrover.com
int-alb.dev.experience.jaguarlandrover.com
login.sso.jaguarlandrover.com
grp.sso.jaguarlandrover.com
stage.sso.jaguarlandrover.com
admin.experience.jaguarlandrover.com
origin-jlrdxforms.jaguarlandrover.com
jaguarlandrover.com
int-alb.dev.experience.jaguarlandrover.com
teamtalk.jaguarlandrover.com
www.wellbeing.jaguarlandrover.com
api.experience.jaguarlandrover.com
teamtalk.jaguarlandrover.com
stage.sso.jaguarlandrover.com
grp-qa4.jaguarlandrover.com
repository.jaguarlandrover.com
api.dev.experience.jaguarlandrover.com
uag-az2-ext.jaguarlandrover.com
api.experience.jaguarlandrover.com
jlrdxforms.jaguarlandrover.com
admin.staging.experience.jaguarlandrover.com
api.comparison.jaguarlandrover.com
jaguarlandrover.com
int-alb.staging.experience.jaguarlandrover.com
digital.jaguarlandrover.com
grp-qa.sso.jaguarlandrover.com
origin-jlrdxforms.jaguarlandrover.com
buysdk.staging.experience.jaguarlandrover.com
jaguarlandrover.com
grp.jaguarlandrover.com
grp-dev.jaguarlandrover.com
teamtalk.jaguarlandrover.com
teamtalk.jaguarlandrover.com
login.sso.jaguarlandrover.com
grp-qa2.jaguarlandrover.com
admin.staging.experience.jaguarlandrover.com
safetyhealthwellbeing.jaguarlandrover.com
connectadmin.jaguarlandrover.com
connect.jaguarlandrover.com
jaguarlandrover.com
grp-dev.jaguarlandrover.com
grp-qa1.jaguarlandrover.com
int-alb.dev.experience.jaguarlandrover.com
newsroom.jaguarlandrover.com
grp-dev.sso.jaguarlandrover.com
innovate.jaguarlandrover.com
talk.landrover.co.uk
vinlookup.jaguarlandrover.com
digital.jaguarlandrover.com
buysdk.dev.experience.jaguarlandrover.com
ncosadmin.jaguarlandrover.com
teamtalk.jaguarlandrover.com
vrportal-production.jlr.connect.agency
*.int.identity.jaguarlandrover.com
grp-qa1.jaguarlandrover.com
buysdk.experience.jaguarlandrover.com
newsroom.jaguarlandrover.com
stage.sso.jaguarlandrover.com

Certificate

The complete raw certificate details for admin.staging.experience.jaguarlandrover.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjJAMRym3g62UOettd9A
wbG6jwYiFLHby/iVSIpeRoYTQILr4+UgnuV/WMslru6vLflxsXH8iJBcmdpXi2mq
lb2YP9CSDD9wkjoMVvuoOEhz/nUNB5SuQB4yOuLDUee7wgBTOA3+WJXzfmyHmlJW
V8TkF2yHFX1u9CZcEmYThml35F/rVLk8uOwGvM+yWbn03MWnpz+u9Lffvc/a0TFE
JCye/zrwbTGeRyvKqV1aO1zJRimc81D+Rz5NsxikbZnDnqLZsyTO56v4iRfnAox6
wS6bAx7bYvcXrO2XnBGlD1c3trLmYRmbhQJhz2ylousxhdHrgq6KAtBaWCMAtP3P
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10881432109661962003756994864992911967
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.staging.experience.jaguarlandrover.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26029870391078668473644726631048523152147599742623950222626097797992231932216986428975464334626914730364887799041573114845255218632310739041194716077333362763330968855552667150028358426079964051420333734384846326281980332752019389840127975047246313580174680457611765914903155272352195368267122348874085833357246898049994591372654450914304590301009653310151455256120022026917364915182286174668390517386813041216982616874654013673629977355078344103901231965445010221649921472668673354041209252205531419533876962599008989956037391739531970734967043441424923770577206010451074778687056692770920978289815129983573833928587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2bff0ec2265b7d852aacf37b7e4e313d7afca95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.staging.experience.jaguarlandrover.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016e22c2829300000403004630440220112931541df590a3aeb4870b5ef06fc6a7a20c16790cb8ca2101a37ec2fec46502206c407543afcd4d9f876ed10205b4eccf68ac9da3e6e778c138874a0f50f96bc10076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016e22c282f60000040300473045022100ef533616f6a755056130f55c3e78f01b01efaffbfb0adf0d5d9f83c8baa63af70220506494377ab3637e9f854da58daaf2e049f5b68b386efe65cdceb9842143819d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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