images.kdfse.com

- Kodak GmbH -

Issued by TC TrustCenter Class 3 L1 CA V

About this certificate

This digital certificate with serial number 69:f0:00:01:00:02:ce:46:e8:d2:85:c6:80:77 was issued on by TC TrustCenter GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DigitalSignature KeyEncipherment] (00000111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)

Kodak GmbH

Organization: Kodak GmbH
Organization unit: Kodak GmbH
State / Province: Baden-Wuerttemberg
Locality: Stuttgart
Country: DE

TC TrustCenter GmbH

Organization: TC TrustCenter GmbH
Organization unit: TC TrustCenter Class 3 L1 CA
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 69:f0:00:01:00:02:ce:46:e8:d2:85:c6:80:77
Serial Number (int): 2148667768595826412463299594977399
Serial Number lenght: 111 bits, 14 octets

SubjectKeyId: 1f:5d:13:89:df:cb:3e:7d:07:84:3e:16:33:72:9e:39:2a:12:97:42
AuthorityKeyId: eb:65:00:87:d6:a0:02:01:aa:1a:d7:53:1e:72:50:6e:68:9c:1b:fe

Fingerprint (sha1): 16:e5:3e:49:48:c8:bd:8b:f1:0e:cb:d1:fd:80:b8:75:7a:48:01:9c
Fingerprint (sha256): 8e:57:00:18:5f:1c:3d:72:ec:8e:22:c9:3e:23:69:fb:07:3c:f3:f9:e8:50:df:5d:38:a6:7f:cf:5a:0d:5f:e0

Issuing Certificate URL: http://www.trustcenter.de/certservices/cacerts/tc_class3_L1_CA_V.crt

Revocation information

OCSP Server: http://ocsp.V.tcclass3.trustcenter.de
CRL Distribution Point: http://www.trustcenter.de/crl/v2/tc_class3_L1_CA_V.crl

Check the revocation status for certificate images.kdfse.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for images.kdfse.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name kdfse.com

(limited to 100 certificates)
kiosk-gateway.kdfse.com
service.jpn.kdfse.com
*.test.kdfse.com
images.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.utils.kdfse.com
intra.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.kdfse.com
rome.kdfse.com
service.kdfse.com
*.kdfse.com
vasp.jpn.kdfse.com
store-gateway.kdfse.com
vasp.jpn.kdfse.com
*.kdfse.com
*.test.kdfse.com
admin.kdfse.com
lab-gateway.kdfse.com
*.jpn.kdfse.com
*.kdfse.com
*.kdfse.com
picturecenter.kdfse.com
*.kdfse.com
kdfse.com
*.kdfse.com
feedback.kdfse.com
images.kdfse.com
feedback.kdfse.com
*.utils.kdfse.com
vasp.test.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
kdfse.com
*.dev.kdfse.com
*.dev.kdfse.com
*.apr.kdfse.com
picturecenter.jpn.kdfse.com
vasp.kdfse.com
ws.kdfse.com
service.jpn.kdfse.com
vasp.jpn.kdfse.com
intra.kdfse.com

Certificate

The complete raw certificate details for images.kdfse.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDUVSXkNfOl5D35A3TdHrsNWqQ0
XceqYD+SZvGakG5nrGogOjgEXFkLmDShtwmHMEerV0RLl8Vh/5Rgvy3+U+PVaP8T
+w630YkgVbSrKT/L/6aq2Ne6f7ZmCaIspZy1kgiwIt9tcDykXRkLdAN56Uws0uIJ
HaQN1yb9evgyYGvzgQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2148667768595826412463299594977399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 3 L1 CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 3 L1 CA V'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-07-14 15:47:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-07-15 15:47:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kodak GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kodak GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'images.kdfse.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 149105029013838529580623016887305524699838780499627185535322113066375684275889985483141753020588218850276702213437905796433042398864610366498654205168404725068350113172681302464786722722855657007461347466511288866445469682342432507472161213684414943080348659894100810474180226500689975434404225590843113468801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.trustcenter.de/certservices/cacerts/tc_class3_L1_CA_V.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.V.tcclass3.trustcenter.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eb650087d6a00201aa1ad7531e72506e689c1bfe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.276.0.44.1.1.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 67 32 84 114 117 115 116 67 101 110 116 101 114 32 67 108 97 115 115 51 32 83 101 114 118 101 114 32 67 101 114 116 105 102 105 99 97 116 101]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.trustcenter.de/guidelines'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f5d1389dfcb3e7d07843e1633729e392a129742
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.trustcenter.de/crl/v2/tc_class3_L1_CA_V.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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