lumixexperience.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:de:37:2e:f2:d6:a8:a8:fc:88:b3:77:33:d4:1d:2f was issued on by Amazon.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lumixexperience.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:de:37:2e:f2:d6:a8:a8:fc:88:b3:77:33:d4:1d:2f
Serial Number (int): 10458405125267698318875421386218937647
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: dc:68:0d:1e:6e:be:90:7a:3d:95:31:b4:7c:73:83:27:24:28:e9:1c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 82:51:39:0c:10:18:fd:46:ff:c4:74:98:5a:81:7a:7c:ab:14:cc:e4
Fingerprint (sha256): 99:ce:14:f3:2f:fa:e8:0a:32:ca:19:00:f0:fc:0b:58:71:d1:91:56:cd:65:15:ad:3b:da:0f:12:32:54:11:d2

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate lumixexperience.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lumixexperience.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lumixexperience.com
lumix-experience.de
www.lumix-experience.nl
lumix-experience.nl
www.lumix-experience.de
lumixexperience.panasonic.co.uk
www.lumixexperience.panasonic.co.uk
www.lumixexperience.com
www.lumixgexperience.de
www.lumixexperience.co.uk
lumixexperience.de
lumixexperience.nl
www.lumixexperience.de
www.lumix-experience.co.uk
lumixexperience.panasonic.nl
lumix-experience.co.uk
lumixgexperience.de
www.lumixexperience.nl
lumixexperience.co.uk

Other certificates including the domain name lumixexperience.com

(limited to 100 certificates)
poweryourday.win.eu.panasonic.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com
lumixexperience.com
showroom.eu.panasonic.com
lumixexperience.com
lumixexperience.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com
poweryourday.win.eu.panasonic.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com

Certificate

The complete raw certificate details for lumixexperience.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQojohzFC1spPBTAYQbt
IYm6vCxpvumkRagf/pWnDPajz5JDK0oZuVIznksdofLluEkpSiTgMniv1OGyHZqV
ZpoI2LR617+XY2ymCkHimr7fQmS9cfieoZVhHQdPPhXxvM5CqrSksTgA4FWqF+Ox
QXeqNaIpSEMZXwA3Cb/LyOI8u6VyRHtKSnL2JwOopRyUn47xegD5CuzhmheYvBIX
GM5Eo5WyA6eE+ToA5cjaDUGUVz+qT+92eo6ECVMvDzO1+nR+c6euSr2vN9l22cYf
LwvP2zXOwi/V0fzleB4HzWA0tswku1cqVLGzIUDXEPM5t2DjWQOepiikZyfjPZpT
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10458405125267698318875421386218937647
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lumixexperience.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18814507262055493272287278792667034656547986063994963802598627306224052279966855574250360870272632518721187507859707700087947674740899931232924039895940765719966733199598705069977476844980314436512262362887364702836788978468976300377812406685639267390909490103524009167814833721415598428462046101040874565952226250011897558369193987782593199205562116146860068970414172765329353067682893133949177529781143737259845352206058128056738935063934978343228053111162249109083282537579463961488504723741680901946955993814694613368007910059991625172432670592773981254650997450073325096979062637181840185316908859082497637110723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc680d1e6ebe907a3d9531b47c7383272428e91c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (478 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumix-experience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumix-experience.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumix-experience.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumix-experience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixexperience.panasonic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixexperience.panasonic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixgexperience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixexperience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixexperience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixexperience.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixexperience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumix-experience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixexperience.panasonic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumix-experience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixgexperience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixexperience.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixexperience.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017fcf81b2530000040300473045022100c55b32dcaebb08bfb1006cd0543bd896ddba21c79b2b7379b3c0ca6d3beb019e02200b63119deb462ec7940aefe70930d68042d5bc88f41025d03ae026e7cb8a204200750035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017fcf81b29a0000040300463044022028a59891a93676ddd0b69ed2655ed0843d7c07f85253d9a0ac5ca0ceb66b351c022070d8bfd9c889e35e0325593f20fa6ec34da2856002416cd7749b21764666aee4007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017fcf81b2bc0000040300483046022100895ffcba689846930fab4f43521bed53126999444c078e833c51c6c12092cce6022100968fa8ea9a371adcc4a6d77ec6c3424b4707dd006fcbd54e6c2eca0f9e1b4e2b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a38faf8064bca6bd9eb16a570341e3f9769ebd9580764d9ca1c8c5df08d8e9ae8540ce093f3a8cae139d4768aa217e35cf9e2722fd7277eca785adf181ef6980dc6077a7d6d9bf330f36e178cd8366eb1dd2173d024cbe686949748c18dedcbd97384a4e7a081e2278fee85b48f0c22f1fe278f23d8a63c08860e0838c5fbe01ddcf0c4a3b7a1f5c787604f0237070eac18a2db262cd7b52f73f3329ef4c9d3c7045cf007b65ec41c05411ca43ca7ab4ca1524c2dc3e493f42dd28c4a9998befb7c8e1ca3111c963a8d541a51650250f9b1c7b42066a66d7cc114540b2b03808be08e4ff39458cd2bac538cc3aa10268c99a59a6e130ac0f1c48c43030880b0b