promotions.panasonic.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f0:5e:3b:ce:d1:6e:59:7c:28:40:6f:a1:65:51:59:d1:a7 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=promotions.panasonic.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f0:5e:3b:ce:d1:6e:59:7c:28:40:6f:a1:65:51:59:d1:a7
Serial Number (int): 430242169759953869314108149252427280404903
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 42:1a:47:31:ec:8a:31:ee:d6:c6:ee:fa:8f:d1:48:4c:55:9f:ca:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c4:86:25:c5:89:54:ee:fa:fb:72:db:f2:fb:96:01:b3:8e:5a:43:36
Fingerprint (sha256): 50:a3:9e:de:65:13:33:e6:45:da:ad:31:85:aa:5d:a9:dd:df:35:0e:6a:4f:ae:e3:2f:d4:46:8b:d7:3c:e8:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate promotions.panasonic.co.uk

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for promotions.panasonic.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jessops.promotions.panasonic.co.uk
jessops.promotions.panasonicmarketing.co.uk
nt.promotions.panasonic.co.uk
nt.promotions.panasonicmarketing.co.uk
old.redemptions.panasonicmarketing.co.uk
promotions.panasonic.co.uk
promotions.panasonicmarketing.co.uk
redemptions.panasonicmarketing.co.uk
rs.promotions.panasonic.co.uk
rs.promotions.panasonicmarketing.co.uk
www.jessops.promotions.panasonic.co.uk
www.jessops.promotions.panasonicmarketing.co.uk
www.nt.promotions.panasonic.co.uk
www.nt.promotions.panasonicmarketing.co.uk
www.old.redemptions.panasonicmarketing.co.uk
www.promotions.panasonic.co.uk
www.promotions.panasonicmarketing.co.uk
www.redemptions.panasonicmarketing.co.uk
www.rs.promotions.panasonic.co.uk
www.rs.promotions.panasonicmarketing.co.uk

Other certificates including the domain name panasonic.co.uk

(limited to 100 certificates)
promotions.panasonic.co.uk
smarthome.panasonic.co.uk
dealer.store.panasonic.co.uk
*.store.panasonic.co.uk
showroom.eu.panasonic.com
panasonic.eu
shop.panasonic.co.uk
promotions.panasonic.co.uk
secure.panasonic.co.uk
business.panasonic.de
aircon.panasonic.de
www.lumixgexperience.panasonic.co.uk
panasonicdirect.store.panasonic.co.uk
www.lumixgexperience.panasonic.co.uk
promotions.panasonic.co.uk
8xlife.panasonic.co.uk
test.promotions.panasonic.co.uk
aircon.panasonic.de
shop.panasonic.de
aircon.panasonic.de
promotions.panasonic.co.uk
promotions.panasonic.co.uk
lumixexperience.panasonic.co.uk
promotions.panasonic.co.uk
lumixexperience.com
smarthome.panasonic.co.uk
news.panasonic.co.uk
aircon.panasonic.de
shop.panasonic.de
aircon.panasonic.de
test.promotions.panasonic.co.uk
test.promotions.panasonic.co.uk
shop.panasonic.co.uk
panasonic.co.uk
test.promotions.panasonic.co.uk
shop.panasonic.co.uk
panasonic.de
test.promotions.panasonic.co.uk
belfast.store.panasonic.co.uk
aircon.panasonic.de
aircon.panasonic.de
test.promotions.panasonic.co.uk
shop.panasonic.at
inverness.store.panasonic.co.uk
promotions.panasonic.co.uk
aircon.panasonic.de
smarthome.panasonic.co.uk
promotions.panasonic.co.uk
smarthome.panasonic.co.uk
www.lumixgexperience.panasonic.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
wimborne.store.panasonic.co.uk
panasonic.de
smarthome.panasonic.co.uk
promotions.panasonic.co.uk
shop.panasonic.co.uk
taunton.store.panasonic.co.uk
sni.cloudflaressl.com
cardiff.store.panasonic.co.uk
aircon.panasonic.de
lumixgexperience.panasonic.co.uk
aircon.panasonic.de
test.promotions.panasonic.co.uk
business.panasonic.ie
shop.panasonic.co.uk
panasonicdirect.store.panasonic.co.uk
smarthome.panasonic.co.uk
leicester.store.panasonic.co.uk
promotions.panasonic.co.uk
www.lumixgexperience.panasonic.co.uk
shop.panasonic.co.uk
promotions.panasonic.co.uk
promotions.panasonic.co.uk
belfast.store.panasonic.co.uk
news.panasonic.co.uk
warrington.store.panasonic.co.uk
shop.panasonic.at
business.panasonic.ie
crawley.store.panasonic.co.uk
*.store.panasonic.co.uk
shop.panasonic.de
business.panasonic.ie
aircon.panasonic.de
crawley.store.panasonic.co.uk
test.promotions.panasonic.co.uk
lumixexperience.com
shop.panasonic.at
smarthome.panasonic.co.uk
lumixexperience.com
shop.panasonic.at
test.promotions.panasonic.co.uk
promotions.panasonic.co.uk
panasonic.de
test.promotions.panasonic.co.uk
store.panasonic.co.uk
promotions.panasonic.co.uk
haverfordwest.store.panasonic.co.uk
business.panasonic.de
store.panasonic.co.uk

Certificate

The complete raw certificate details for promotions.panasonic.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430242169759953869314108149252427280404903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 16:45:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 16:45:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promotions.panasonic.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 682179583001345479842249850757406216843484766947007864464309819950946818667507393359496514621168238183029738206587119637145572361734498711458154322119242649171818586408787451441634369637082490430573777256384546955950858622036731907065185573415111803551570933453265859445693877879010794540197414748083129943205923068897652935327437616954957545093823974931313440330975062198804235746960312983671828892315075128574916077379361229155895381214337775103575644727400764235064249713953974075085119556724858447456999491818824691487839337893212120142083176754430300210086456127167270024587722818912812809244744063047904759642236555373955430291592268580874278062041681142228581640265062880439979799149786723352603808000019468768577409542679701232406242174061622660621030712820552542623541944643524552923223064677874475171664414558554925304724983335819847005608107052574681364499101157508331582893564237099477491800707757788553752212534301317342604122777514791930600892466175347145778478102437478373481488221066674830301137959057135452204290124553376431047663235566407894019345113552507533476161203525006103070237722042110275746073531654496157225538733661428346255693242460923971708302765211865975826085227541252964608893054775106657257437602723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							421a4731ec8a31eed6c6eefa8fd1484c559fca1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (780 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jessops.promotions.panasonic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jessops.promotions.panasonicmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nt.promotions.panasonic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nt.promotions.panasonicmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.redemptions.panasonicmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotions.panasonic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotions.panasonicmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redemptions.panasonicmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rs.promotions.panasonic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rs.promotions.panasonicmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jessops.promotions.panasonic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jessops.promotions.panasonicmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nt.promotions.panasonic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nt.promotions.panasonicmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.redemptions.panasonicmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promotions.panasonic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promotions.panasonicmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redemptions.panasonicmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rs.promotions.panasonic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rs.promotions.panasonicmarketing.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eccddcd88000004030047304502210093ad98d007c026a808b98d92838b9be4155fa21b93297170a472773d88d350cd022054aa0da10e94ee8bb31fb5d5b5981fb417defb7e16bbc1e182f82feb96ae539c007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eccddcf35000004030046304402201282ec0be439b107a826e3da360ee856b67abdca871673e925d6a75182a8105d02204e430ae38069ae2cc20a2ba541f2531c4fdd867a99d8778bca57db4e05550b7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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