smarthome.panasonic.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f1:72:14:60:df:0b:70:bf:d7:ed:05:2d:2d:2a:3a:ea:1a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=smarthome.panasonic.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:72:14:60:df:0b:70:bf:d7:ed:05:2d:2d:2a:3a:ea:1a
Serial Number (int): 343496546025466303572604850440756300278298
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:a4:78:bb:09:1c:c8:5b:d2:de:cc:81:b6:d7:71:18:0f:40:b2:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:26:b8:4b:8d:35:9b:4a:22:11:d5:dc:3b:d1:86:29:92:27:00:3b
Fingerprint (sha256): 4b:5f:21:c9:c1:3d:ae:f9:3a:06:d6:17:2f:a6:8a:16:9d:9a:4d:cf:dc:9f:82:d6:ca:30:45:79:21:9b:cf:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate smarthome.panasonic.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smarthome.panasonic.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smarthome.panasonic.co.uk

Other certificates including the domain name panasonic.co.uk

(limited to 100 certificates)
promotions.panasonic.co.uk
smarthome.panasonic.co.uk
dealer.store.panasonic.co.uk
*.store.panasonic.co.uk
showroom.eu.panasonic.com
panasonic.eu
shop.panasonic.co.uk
promotions.panasonic.co.uk
secure.panasonic.co.uk
business.panasonic.de
aircon.panasonic.de
www.lumixgexperience.panasonic.co.uk
panasonicdirect.store.panasonic.co.uk
www.lumixgexperience.panasonic.co.uk
promotions.panasonic.co.uk
8xlife.panasonic.co.uk
test.promotions.panasonic.co.uk
aircon.panasonic.de
shop.panasonic.de
aircon.panasonic.de
promotions.panasonic.co.uk
promotions.panasonic.co.uk
lumixexperience.panasonic.co.uk
promotions.panasonic.co.uk
lumixexperience.com
smarthome.panasonic.co.uk
news.panasonic.co.uk
aircon.panasonic.de
shop.panasonic.de
aircon.panasonic.de
test.promotions.panasonic.co.uk
test.promotions.panasonic.co.uk
shop.panasonic.co.uk
panasonic.co.uk
test.promotions.panasonic.co.uk
shop.panasonic.co.uk
panasonic.de
test.promotions.panasonic.co.uk
belfast.store.panasonic.co.uk
aircon.panasonic.de
aircon.panasonic.de
test.promotions.panasonic.co.uk
shop.panasonic.at
inverness.store.panasonic.co.uk
promotions.panasonic.co.uk
aircon.panasonic.de
smarthome.panasonic.co.uk
promotions.panasonic.co.uk
smarthome.panasonic.co.uk
www.lumixgexperience.panasonic.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
wimborne.store.panasonic.co.uk
panasonic.de
smarthome.panasonic.co.uk
promotions.panasonic.co.uk
shop.panasonic.co.uk
taunton.store.panasonic.co.uk
sni.cloudflaressl.com
cardiff.store.panasonic.co.uk
aircon.panasonic.de
lumixgexperience.panasonic.co.uk
aircon.panasonic.de
test.promotions.panasonic.co.uk
business.panasonic.ie
shop.panasonic.co.uk
panasonicdirect.store.panasonic.co.uk
smarthome.panasonic.co.uk
leicester.store.panasonic.co.uk
promotions.panasonic.co.uk
www.lumixgexperience.panasonic.co.uk
shop.panasonic.co.uk
promotions.panasonic.co.uk
promotions.panasonic.co.uk
belfast.store.panasonic.co.uk
news.panasonic.co.uk
warrington.store.panasonic.co.uk
shop.panasonic.at
business.panasonic.ie
crawley.store.panasonic.co.uk
*.store.panasonic.co.uk
shop.panasonic.de
business.panasonic.ie
aircon.panasonic.de
crawley.store.panasonic.co.uk
test.promotions.panasonic.co.uk
lumixexperience.com
shop.panasonic.at
smarthome.panasonic.co.uk
lumixexperience.com
shop.panasonic.at
test.promotions.panasonic.co.uk
promotions.panasonic.co.uk
panasonic.de
test.promotions.panasonic.co.uk
store.panasonic.co.uk
promotions.panasonic.co.uk
haverfordwest.store.panasonic.co.uk
business.panasonic.de
store.panasonic.co.uk

Certificate

The complete raw certificate details for smarthome.panasonic.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOUPiB+5g7sSZ0pzARV8
sORMFXu8Yc8Ys2X/hxxBveHwyVj04JUUGi2/6eHtnNJQrJwn++S0+4F4pRgFurvG
bdoa8J+ggJHoxWYy6A08uadW5QEvirlZVu8CiJil3bKw3ThPYNyGckYeDZZ2FvTp
lQn43E9LW1vj58j4kK8IixdG8GNQRQm8U+x9WOWOqRW99+PIyiSpDVrJAqd0aqPy
npNETRrwdgBO73VW8lqQ+TfVi6sCNj6ltNzsEXEwFm7WEjK7QgpAJyu49kinqqKu
B8gSiYrjvj+dWpzW1nNF3382jKGk6CZkdd50eumE3np6ww2HeD3In/FgIGDup9YO
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343496546025466303572604850440756300278298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 10:57:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 10:57:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smarthome.panasonic.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21320989260941428593643935556134765051028445219640116087172978154481113549750067498411090822391925397393578124629458333614384453472256782756046658248527606767680775414274306054393952214467498097617881121938035380434401817112689986654540730576892354376682046701538008979890469802841590539679106659815001363823704282659593703770108777390114088712304167199755025367771509602111778148715319210223495737006677211679891750358508109853078814739626888332030574528570421652525807880000314677926437470718528375235694879122451256690024870021409479376229705510475493580683495143684625095055037425530031000206886193145905900031737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3a478bb091cc85bd2decc81b6d771180f40b2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarthome.panasonic.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016514401e060000040300463044022028fc90a773b560bf73f1d5fd58eca16ca8242bc974263daf015f77512c60731b02202c7fb3d5c72fd503fa8c0cd40753ec28954e685b06fff619bdadf80d3da354af007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a250000016514401e0200000403004730450220695bb60a6c960f4ce6deada4bab72895ad2f07c81e4f86c3832a37c46cff09400221008c8a73a1b58e3038563bd9bef7d79a46208c66a6abdab645387e97d4db8d352a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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