www.lumixgexperience.panasonic.co.uk

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 27:fb was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.lumixgexperience.panasonic.co.uk,OU=GT49668894+OU=See www.geotrust.com/resources/cps (c)14+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 27:fb
Serial Number (int): 10235
Serial Number lenght: 14 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): 11:af:bd:44:58:b7:93:77:fa:30:97:99:c8:64:8d:2f:eb:77:f5:d4
Fingerprint (sha256): 54:2f:b3:89:e4:77:a2:f3:b8:af:33:7e:fc:37:9f:ac:f7:68:cc:b5:28:ed:f1:bd:ca:90:dd:7d:2c:60:00:c1

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate www.lumixgexperience.panasonic.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lumixgexperience.panasonic.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lumixgexperience.panasonic.co.uk

Other certificates including the domain name panasonic.co.uk

(limited to 100 certificates)
promotions.panasonic.co.uk
smarthome.panasonic.co.uk
dealer.store.panasonic.co.uk
*.store.panasonic.co.uk
showroom.eu.panasonic.com
panasonic.eu
shop.panasonic.co.uk
promotions.panasonic.co.uk
secure.panasonic.co.uk
business.panasonic.de
aircon.panasonic.de
www.lumixgexperience.panasonic.co.uk
panasonicdirect.store.panasonic.co.uk
www.lumixgexperience.panasonic.co.uk
promotions.panasonic.co.uk
8xlife.panasonic.co.uk
test.promotions.panasonic.co.uk
aircon.panasonic.de
shop.panasonic.de
aircon.panasonic.de
promotions.panasonic.co.uk
promotions.panasonic.co.uk
lumixexperience.panasonic.co.uk
promotions.panasonic.co.uk
lumixexperience.com
smarthome.panasonic.co.uk
news.panasonic.co.uk
aircon.panasonic.de
shop.panasonic.de
aircon.panasonic.de
test.promotions.panasonic.co.uk
test.promotions.panasonic.co.uk
shop.panasonic.co.uk
panasonic.co.uk
test.promotions.panasonic.co.uk
shop.panasonic.co.uk
panasonic.de
test.promotions.panasonic.co.uk
belfast.store.panasonic.co.uk
aircon.panasonic.de
aircon.panasonic.de
test.promotions.panasonic.co.uk
shop.panasonic.at
inverness.store.panasonic.co.uk
promotions.panasonic.co.uk
aircon.panasonic.de
smarthome.panasonic.co.uk
promotions.panasonic.co.uk
smarthome.panasonic.co.uk
www.lumixgexperience.panasonic.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
wimborne.store.panasonic.co.uk
panasonic.de
smarthome.panasonic.co.uk
promotions.panasonic.co.uk
shop.panasonic.co.uk
taunton.store.panasonic.co.uk
sni.cloudflaressl.com
cardiff.store.panasonic.co.uk
aircon.panasonic.de
lumixgexperience.panasonic.co.uk
aircon.panasonic.de
test.promotions.panasonic.co.uk
business.panasonic.ie
shop.panasonic.co.uk
panasonicdirect.store.panasonic.co.uk
smarthome.panasonic.co.uk
leicester.store.panasonic.co.uk
promotions.panasonic.co.uk
www.lumixgexperience.panasonic.co.uk
shop.panasonic.co.uk
promotions.panasonic.co.uk
promotions.panasonic.co.uk
belfast.store.panasonic.co.uk
news.panasonic.co.uk
warrington.store.panasonic.co.uk
shop.panasonic.at
business.panasonic.ie
crawley.store.panasonic.co.uk
*.store.panasonic.co.uk
shop.panasonic.de
business.panasonic.ie
aircon.panasonic.de
crawley.store.panasonic.co.uk
test.promotions.panasonic.co.uk
lumixexperience.com
shop.panasonic.at
smarthome.panasonic.co.uk
lumixexperience.com
shop.panasonic.at
test.promotions.panasonic.co.uk
promotions.panasonic.co.uk
panasonic.de
test.promotions.panasonic.co.uk
store.panasonic.co.uk
promotions.panasonic.co.uk
haverfordwest.store.panasonic.co.uk
business.panasonic.de
store.panasonic.co.uk

Certificate

The complete raw certificate details for www.lumixgexperience.panasonic.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9Rm8pNpzgECfh6Dw9Vr
76vArK6AXKc5CSg8XVUiM/i0HJ61NHnIn2wii5HADS7yEBuXQnKh6892hgfDO7WB
RYKwHWy/0OWcT5mY2VhfC2o3goYllfGV4PqXv+m0jEOivrsCrvVXu3L/SZ39KbrN
SOB3TE84w7Q9votVdMDWoZ4+dXikP0B9sm5ZwCp5bxG3QUXUaOdyOsJZMYfBJ0sg
XtUAGAyzNmaV2KFH2bq2EJCgpQnHuQWaTv8onXSmrKTfwYoVR9+KikM18/9ad/mf
Jmu0R3DkbpPhBDOyzEn96VClAYs+LEqmkhPSUYfJvB8l7nca1mM1P5pm7Sy/8nyh
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10235
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-15 16:10:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-19 19:30:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT49668894'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lumixgexperience.panasonic.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22701395987313563051467245300938226440733703361338369700792085932927001847697080426752428666319508238188759549829725256822229589651868865004295091812837483330029172250207101328475105767402972880047822044967774730346919230033404429298557592282652472607543008934482869779538715246582129565855471201037928969229316530111442730008671456054566084160698420627220077454399040095946289264822992027993709269988489838141575747443965865135438387027519895570558236899173679606371276022371959280761934452491725875364895606204908763177921993360418539093225137047794769978388409368427065164440308400033616392334049326079644108890461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixgexperience.panasonic.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008c7efa191ba4c3c09d33d00b6452d1e6b3201bb3e474d12216b4d91543be323113077153242729e1b52328118e48a3a055f7152dbd7a256b7b6638308d2349f23894c02c83e4751ec12a315eceeddd29f807c0a5b355bdf8ea8a7d80d7e561eca39e3a86db536e8b0b37aaf3b556d3081daf5980cef40fc407a0ceac92deefb32cb711786b7be944ed753d4084a6bbf48ec124fb886cf3596cebdcded24ea5db7abc134c548a4438c477551fa431837577a4b21ec20362a365ba12017bb298a6ab41e93caee61694e8b08b020209d3d9c14066e04ec2e893be05d1eb9f80df0675aa51585300ccc1e9bed4f88eedaa947a7a86dbdb6ee67ff165d3c2aed7327a