store.panasonic.co.uk

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:bc:c1:54:9a:47:ca:12:f7:aa:61:28:81:07:eb:14 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=store.panasonic.co.uk

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:bc:c1:54:9a:47:ca:12:f7:aa:61:28:81:07:eb:14
Serial Number (int): 20918492954144921171913914441414470420
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a5:ea:38:97:0f:54:7d:22:9c:a8:72:17:7f:5a:a6:d4:76:be:2d:0c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 85:46:86:35:d1:5b:de:7e:84:4c:ae:c2:6e:5a:90:2c:a9:9f:cc:6f
Fingerprint (sha256): a7:26:cd:a9:aa:6f:bd:bc:5f:38:f3:f0:f4:09:28:bf:3b:cc:f2:99:ee:ed:6d:25:86:e4:6b:f4:79:2f:5b:e6

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate store.panasonic.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for store.panasonic.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

store.panasonic.co.uk

Other certificates including the domain name panasonic.co.uk

(limited to 100 certificates)
promotions.panasonic.co.uk
smarthome.panasonic.co.uk
dealer.store.panasonic.co.uk
*.store.panasonic.co.uk
showroom.eu.panasonic.com
panasonic.eu
shop.panasonic.co.uk
promotions.panasonic.co.uk
secure.panasonic.co.uk
business.panasonic.de
aircon.panasonic.de
www.lumixgexperience.panasonic.co.uk
panasonicdirect.store.panasonic.co.uk
www.lumixgexperience.panasonic.co.uk
promotions.panasonic.co.uk
8xlife.panasonic.co.uk
test.promotions.panasonic.co.uk
aircon.panasonic.de
shop.panasonic.de
aircon.panasonic.de
promotions.panasonic.co.uk
promotions.panasonic.co.uk
lumixexperience.panasonic.co.uk
promotions.panasonic.co.uk
lumixexperience.com
smarthome.panasonic.co.uk
news.panasonic.co.uk
aircon.panasonic.de
shop.panasonic.de
aircon.panasonic.de
test.promotions.panasonic.co.uk
test.promotions.panasonic.co.uk
shop.panasonic.co.uk
panasonic.co.uk
test.promotions.panasonic.co.uk
shop.panasonic.co.uk
panasonic.de
test.promotions.panasonic.co.uk
belfast.store.panasonic.co.uk
aircon.panasonic.de
aircon.panasonic.de
test.promotions.panasonic.co.uk
shop.panasonic.at
inverness.store.panasonic.co.uk
promotions.panasonic.co.uk
aircon.panasonic.de
smarthome.panasonic.co.uk
promotions.panasonic.co.uk
smarthome.panasonic.co.uk
www.lumixgexperience.panasonic.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
wimborne.store.panasonic.co.uk
panasonic.de
smarthome.panasonic.co.uk
promotions.panasonic.co.uk
shop.panasonic.co.uk
taunton.store.panasonic.co.uk
sni.cloudflaressl.com
cardiff.store.panasonic.co.uk
aircon.panasonic.de
lumixgexperience.panasonic.co.uk
aircon.panasonic.de
test.promotions.panasonic.co.uk
business.panasonic.ie
shop.panasonic.co.uk
panasonicdirect.store.panasonic.co.uk
smarthome.panasonic.co.uk
leicester.store.panasonic.co.uk
promotions.panasonic.co.uk
www.lumixgexperience.panasonic.co.uk
shop.panasonic.co.uk
promotions.panasonic.co.uk
promotions.panasonic.co.uk
belfast.store.panasonic.co.uk
news.panasonic.co.uk
warrington.store.panasonic.co.uk
shop.panasonic.at
business.panasonic.ie
crawley.store.panasonic.co.uk
*.store.panasonic.co.uk
shop.panasonic.de
business.panasonic.ie
aircon.panasonic.de
crawley.store.panasonic.co.uk
test.promotions.panasonic.co.uk
lumixexperience.com
shop.panasonic.at
smarthome.panasonic.co.uk
lumixexperience.com
shop.panasonic.at
test.promotions.panasonic.co.uk
promotions.panasonic.co.uk
panasonic.de
test.promotions.panasonic.co.uk
store.panasonic.co.uk
promotions.panasonic.co.uk
haverfordwest.store.panasonic.co.uk
business.panasonic.de
store.panasonic.co.uk

Certificate

The complete raw certificate details for store.panasonic.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPXabHgkpnbhFitm4Lm9
mv3bTv0hqnCFKY/6K+L2ayWn/K7aO/ODVII/BkynuZ+Q2updXsDB2INgdG+FzLU3
rrxwC9J/0R+cUmWWwzgTzD+sTnxlqVRGxTJOEHcDczt3fdOKXimBhHahNPNx0TZG
9dujBLYD4ojagS6nnln2ANTzsJOrPOQPsM/3EmP5lzbw4aLN3WWK4NbFc+JD0TF+
A7qg1Dl9iqwjI8gl5p4Vs2wJ5ccGCuAt3sGTyeZ3fsTFpc+PxpE4uUbRblBvPIhe
FST8vNL1nSLveq02jIWr9MhxgAe+qnmOjf5O2/HiFVBSlDKBLUmMOIoJsYREtHFF
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20918492954144921171913914441414470420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'store.panasonic.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23349082853839071713685883047421164691802908896573036049340252245666432924209281355963033304264666255369546354614948966773029421364131822466434028039427830825214876772375331830800400935748064037162510340759947057149615748107304967210384138160736513142389566000823939891888568407713612938993827103515892347641325984935440488485231865118822614144756917331005507202444173120498613295837856076455131238031392564446954049239184273441224799614693493849750563366159202352387431332445839442210073245187384997582027245002051230814817013205477148855628900379867506723861846437289745689036997459111354223803835246680487163413993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5ea38970f547d229ca872177f5aa6d476be2d0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.panasonic.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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