dlc.panasonic-europe-service.com

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 4e:f9:65:f7:e8:4e:88:1f:ad:65:a7:a1:ac:57:2a:c6 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=dlc.panasonic-europe-service.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:f9:65:f7:e8:4e:88:1f:ad:65:a7:a1:ac:57:2a:c6
Serial Number (int): 104974733753620181326672559196132027078
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): c8:82:2d:6c:04:a6:a9:26:92:8c:a0:9d:95:58:e6:48:a5:f5:5d:f7
Fingerprint (sha256): f6:d9:d6:f6:44:7d:9f:a3:e8:ae:b6:22:dd:5e:7b:56:b4:3b:ab:5f:f5:a3:02:4b:60:67:65:0b:7f:ae:1b:fb

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate dlc.panasonic-europe-service.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dlc.panasonic-europe-service.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dlc.panasonic-europe-service.com

Other certificates including the domain name panasonic-europe-service.com

(limited to 100 certificates)
panasonic.de
dlc.panasonic-europe-service.com
www.panasonic-europe-service.com
tda.panasonic-europe-service.com
tda.panasonic-europe-service.com
panasonic.de
dlc.panasonic-europe-service.com
shop.panasonic.de
tda.panasonic-europe-service.com
tda.panasonic-europe-service.com
dlc.panasonic-europe-service.com
panasonic.de
tda.panasonic-europe-service.com
tda.panasonic-europe-service.com
panasonic.de
sni.cloudflaressl.com
dlc.panasonic-europe-service.com
dlc.panasonic-europe-service.com
panasonic.de
dlc.panasonic-europe-service.com
panasonic.de
www.panasonic-europe-service.com
shop.panasonic.de
sni.cloudflaressl.com
panasonic.de
sni.cloudflaressl.com
dlc.panasonic-europe-service.com
www.panasonic-europe-service.com
sni.cloudflaressl.com
www.panasonic-europe-service.com
www.panasonic-europe-service.com
panasonic-europe-service.com
tda.panasonic-europe-service.com
www.panasonic-europe-service.com
panasonic.de
*.panasonic-europe-service.com
www.panasonic-europe-service.com
panasonic-europe-service.com
tda.panasonic-europe-service.com
sni.cloudflaressl.com
tda.panasonic-europe-service.com
dlc.panasonic-europe-service.com
panasonic.de

Certificate

The complete raw certificate details for dlc.panasonic-europe-service.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y8PwQLPNh3tjuGkoqnP
+0GLBtF3uRq1KhB6t1CF0S21janz6RrQIu07NyCNiQAl1egHX7Y31fSu1uf+ur//
H25IFiE5XY46IsZAZIF8pd4ZU3lZe8ewyo/B0SRTFmPn1PklnpqxpAlgGx9/GMng
2BzTxvWvN7Wh0QawsIgekp13xgEDMzT+g+QwMMy01mgJ+hC5h5ofpHiry9PRQQrR
RypdO0GaqY3p88eJe5RvbeaM6abbmBJF5SFCW5nu/gfG3W/VYhBWVui1IOiRkiIw
l2LnfxOcw0cHuUUQOHy+9XcDcVYicgHfg2yKd8HSFbhPdyxMMt1nkHP2GRIkIOpi
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104974733753620181326672559196132027078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dlc.panasonic-europe-service.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26659489257585452399167798624988058457765158990348158054447837931502666495432721104725250012601340404184089954198969918426528838218959255083680223592937170866284202884181148780276651406724870064438621134499824545297780038526743657439242224021874270824519808236625162464903536562426398243097194438120817772852136970978516473084901267357140972919823176737297608486455835382369555440850258198938460080543141300359188663303684607094690515720715165594595690441825684668836667640705894514924163112573904278696679734588085527239311290753495840918929476940882077293525454418523429685808780138231443993050953940848860566544991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlc.panasonic-europe-service.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015a845ef99b0000040300463044022071baa15e6a390887a071927c0d4b6c901a598ed0d8e55391d56bf4c52d29781a02207d917db1331b389bc76bac41e7a9fc9f1909afeea925ef2c922cd9e2b02ba0a5007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015a845ef9f10000040300473045022100dda457d31b68d2752b5b1a7155d6c9d414fc36063ed9061b268685ed895a9c920220139a3fe64744f9e2108b0a68211a29a645b39ff6ed1d470a5108b33e2daad2d2007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015a845efc0e0000040300473045022100e30ae472963d04dce852cf624e96d37794d75ab94f6498b725fd34694db18bcc022058e80184ae90cd4544b6018c75c13f3dfc2125eab84df58a755289f676365319
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d3c156b8c0c22ad61742a7b028d8ac3d25a00d9ecedc947830449ce6d226d7cd8e90a3ffa58d8468db452ea88454b6f8ffcf200b9aa80429565fff373d6dcc6c5da02a9e13f22a64817364eb8595398a97d4884896be892da45da873bf4b1d5d7d378158b492e3dc441d5a71bd26dd97cb3c0f08ce4d68b73d762900c0c4de8fbc2ccf44c8ac10a084a8e96a26b52fe4a57618473ff3312cdcb78bc6ee7d40b0fc0e007e17754a343194402fc13b2ec9c2987f03ef39d213ba6f36ea9403394b51e5778a68665ded7e2c19f62ed797a787cf92d8b5f408d87ab255f94ae93605b5674de3dcabbd1504ba03ec342162ad4cded1dae2a9c662803b9eca5968a61