vasp.jpn.kdfse.com
- Kodak GmbH -
Issued by GeoTrust SSL CA - G2
About this certificate
This digital certificate with serial number 37:2a:c4:19:3b:79:d6:16:b7:92:8c:4c:60:49:4f:2c was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Kodak GmbH
Organization:
Kodak GmbH
State / Province:
Baden-Württemberg
Locality: Stuttgart
Country: DE
Locality: Stuttgart
Country: DE
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 37:2a:c4:19:3b:79:d6:16:b7:92:8c:4c:60:49:4f:2cSerial Number (int): 73329593587622120963235424886885797676
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc
Fingerprint (sha1): 7d:e5:34:eb:69:45:e8:2f:6c:39:67:70:28:f3:2d:8c:f9:cf:07:dc
Fingerprint (sha256): 57:41:c9:0d:63:d8:b5:c8:12:df:4e:c2:de:57:a6:b7:84:ef:f3:04:7e:1d:73:9d:75:e1:7c:48:60:62:dc:4b
Issuing Certificate URL: http://gtssl2-aia.geotrust.com/gtssl2.cer
Revocation information
OCSP Server: http://gtssl2-ocsp.geotrust.comCRL Distribution Point: http://gtssl2-crl.geotrust.com/gtssl2.crl
Check the revocation status for certificate vasp.jpn.kdfse.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vasp.jpn.kdfse.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vasp.jpn.kdfse.com
Other certificates including the domain name kdfse.com
(limited to 100 certificates)
kiosk-gateway.kdfse.com
service.jpn.kdfse.com
*.test.kdfse.com
images.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.utils.kdfse.com
intra.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.kdfse.com
rome.kdfse.com
service.kdfse.com
*.kdfse.com
vasp.jpn.kdfse.com
store-gateway.kdfse.com
vasp.jpn.kdfse.com
*.kdfse.com
*.test.kdfse.com
admin.kdfse.com
lab-gateway.kdfse.com
*.jpn.kdfse.com
*.kdfse.com
*.kdfse.com
picturecenter.kdfse.com
*.kdfse.com
kdfse.com
*.kdfse.com
feedback.kdfse.com
images.kdfse.com
feedback.kdfse.com
*.utils.kdfse.com
vasp.test.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
kdfse.com
*.dev.kdfse.com
*.dev.kdfse.com
*.apr.kdfse.com
picturecenter.jpn.kdfse.com
vasp.kdfse.com
ws.kdfse.com
service.jpn.kdfse.com
vasp.jpn.kdfse.com
intra.kdfse.com
service.jpn.kdfse.com
*.test.kdfse.com
images.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.utils.kdfse.com
intra.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.kdfse.com
rome.kdfse.com
service.kdfse.com
*.kdfse.com
vasp.jpn.kdfse.com
store-gateway.kdfse.com
vasp.jpn.kdfse.com
*.kdfse.com
*.test.kdfse.com
admin.kdfse.com
lab-gateway.kdfse.com
*.jpn.kdfse.com
*.kdfse.com
*.kdfse.com
picturecenter.kdfse.com
*.kdfse.com
kdfse.com
*.kdfse.com
feedback.kdfse.com
images.kdfse.com
feedback.kdfse.com
*.utils.kdfse.com
vasp.test.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
kdfse.com
*.dev.kdfse.com
*.dev.kdfse.com
*.apr.kdfse.com
picturecenter.jpn.kdfse.com
vasp.kdfse.com
ws.kdfse.com
service.jpn.kdfse.com
vasp.jpn.kdfse.com
intra.kdfse.com
Certificate
The complete raw certificate details for vasp.jpn.kdfse.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIQNyrEGTt51ha3koxMYElPLDANBgkqhkiG9w0BAQUFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzIwHhcNMTMwNjE3MDAwMDAwWhcNMTQwNjE3MjM1 OTU5WjBwMQswCQYDVQQGEwJERTEbMBkGA1UECAwSQmFkZW4tV8O8cnR0ZW1iZXJn MRIwEAYDVQQHDAlTdHV0dGdhcnQxEzARBgNVBAoMCktvZGFrIEdtYkgxGzAZBgNV BAMMEnZhc3AuanBuLmtkZnNlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMGNhLtEVga3Ln9M9UKWmmh4R9ZpDPr45TcqwNTPeONWUDQFIKHmqBk2 fTh2SeNJPymh2UPaL+zoFjQU9nxNLSwO0IR05qyT+giGylx4AZ143YD8gsIhbiY3 oVGYwFeW2+KSTQorL5QI4C6sLkdG+BK5kdReuxq1N+crNayvmoCQuhkKkkCAQhBZ 6E/dHJ16FHNI2clC4ErU166/1NA7XoOsM+wBT3waQzqiDLO7vRWiN+/6YpuL/tiS v9cZ7k2M4Xe95gtESsm5Pc8h/6RYy6b7tM6dxiOy5CADsET3E/Pcqq3NwgyivHzU StLVZpVxdvkne3QF+sGUE498hfiE/u8CAwEAAaOCAXwwggF4MB0GA1UdEQQWMBSC EnZhc3AuanBuLmtkZnNlLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDA6 BgNVHR8EMzAxMC+gLaArhilodHRwOi8vZ3Rzc2wyLWNybC5nZW90cnVzdC5jb20v Z3Rzc2wyLmNybDBMBgNVHSAERTBDMEEGCmCGSAGG+EUBBzYwMzAxBggrBgEFBQcC ARYlaHR0cDovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL2NwczAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUEUrQcznVW2kIXLo9 v2SaqIscVbwwcgYIKwYBBQUHAQEEZjBkMCsGCCsGAQUFBzABhh9odHRwOi8vZ3Rz c2wyLW9jc3AuZ2VvdHJ1c3QuY29tMDUGCCsGAQUFBzAChilodHRwOi8vZ3Rzc2wy LWFpYS5nZW90cnVzdC5jb20vZ3Rzc2wyLmNlcjANBgkqhkiG9w0BAQUFAAOCAQEA PTY0X2IG0dZdye0qtJ35DzJ1lMPC8/50S5xRZHGnKuX/NLFBjr8EvM5x1uF6aKN8 Kgi2qvA+mGzLXF95+6D/yB1kEbgjOvSn8AiRztF9OxQBi4hkuVD3fIFnEcnEault w+hjxgTHcJvVQsiIUfK1VNS/YQD+BgYMa7Ed4mFyf+nilx/LQ20hQQy26zSi/IWr K0cO/yyf+mnTjzBPgnXXV5WIF2UPNPl45TafksCtsRdZa4cTsnticnKBlbGKgykB h/cw4fnMreN9+iPakjPFLxzXxXkf31Xa3K69sEoqaQxoq/T1n6f5hzuooNIDAjQ6 vN6xMS+GaBBcxiNKqG/IiA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY2Eu0RWBrcuf0z1Qpaa aHhH1mkM+vjlNyrA1M9441ZQNAUgoeaoGTZ9OHZJ40k/KaHZQ9ov7OgWNBT2fE0t LA7QhHTmrJP6CIbKXHgBnXjdgPyCwiFuJjehUZjAV5bb4pJNCisvlAjgLqwuR0b4 ErmR1F67GrU35ys1rK+agJC6GQqSQIBCEFnoT90cnXoUc0jZyULgStTXrr/U0Dte g6wz7AFPfBpDOqIMs7u9FaI37/pim4v+2JK/1xnuTYzhd73mC0RKybk9zyH/pFjL pvu0zp3GI7LkIAOwRPcT89yqrc3CDKK8fNRK0tVmlXF2+Sd7dAX6wZQTj3yF+IT+ 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 73329593587622120963235424886885797676 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-17 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stuttgart' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kodak GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vasp.jpn.kdfse.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24433778223089802786027244691985735528159204855489079777271969833243547135481584477584586661544596051546146146122618229200322090650472118424803526499001491961196245589200439192056950931441031639894721248510839517995716999961876606680669685163817458626316513941374776267127493964355687129648006402253835796621797944928191358054082550653537370844794771990655878046908237915846613689745132341243400592582361553819404622028770388069416168568663583734592299043936637086949497846483615250573773549546512011024509484289269539559112071697489872300478210315121742206590829339559024692102842384013232414751593885883000754077423 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vasp.jpn.kdfse.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-crl.geotrust.com/gtssl2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-aia.geotrust.com/gtssl2.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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