eu.industrial.panasonic.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:eb:b0:57:45:b0:7f:f1:1b:63:51:ae:0c:9a:bd:92 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eu.industrial.panasonic.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:eb:b0:57:45:b0:7f:f1:1b:63:51:ae:0c:9a:bd:92
Serial Number (int): 3882222371833738483611407667875724690
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 18:29:fe:6b:4a:0f:9e:82:0c:37:3f:97:e0:b8:d6:02:14:ec:65:79
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 64:77:12:14:7e:5c:1f:a6:48:16:bd:cb:0f:6d:b8:eb:50:ad:d0:66
Fingerprint (sha256): fc:fb:1f:88:ac:0c:40:43:38:b3:a5:0e:d4:7f:bc:49:88:41:3b:60:96:22:32:f7:ff:85:d8:25:73:71:29:08

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate eu.industrial.panasonic.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eu.industrial.panasonic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eu.industrial.panasonic.com
business.panasonic.bg
business.panasonic.at
b2b-psd.panasonic.eu

Other certificates including the domain name panasonic.com

(limited to 100 certificates)
rec.panasonic.com
demo.smartcare.panasonic.com
epp.panasonic.com
driveboss.panasonic.com
AS2CP.PANASONIC.COM
touch.panasonic.com
*.musockets.jp.eww.panasonic.com
partners.in.panasonic.com
glclm.car.panasonic.com
eu.sso.www.panasonic.com
jcms.panasonic.com
san-2-s13.tlsprovisioning.exacttarget.com
*.proxy-stg2.pcpf.panasonic.com
dwqa.panasonic.com
jcms.panasonic.com
stg-aquarea-smart.panasonic.com
stg1.ref.apws.panasonic.com
poweryourday.win.eu.panasonic.com
mobility.eu.panasonic.com
ns91.ewct-test.pisc.jp.panasonic.com
lypool03.palet.jp.panasonic.com
ftp.panasonic.com
bettertopia.panasonic.com
ac-zhishi.panasonic.com
soji4biz.jp.eww.panasonic.com
stg-grac.panasonic.com
demo.smartcare.panasonic.com
news.panasonic.com
ns81.ewct-test.cisc.jp.panasonic.com
pages.enterprise.panasonic.com
sandbox.security.us.panasonic.com
kaizenswitch.panasonic.com
us.panasonic.com
*.jpn.panasonic.com
mail.panasonic.ae
car.jpn.faq.panasonic.com
panasonic.co.jp
wdp.in.panasonic.com
b-healthy.jp.eww.panasonic.com
*.aisdev.jp.panasonic.com
help.xdmod.org
poisplus.in.eww.panasonic.com
www.us.panasonic.com
cms.news.panasonic.com
cpregui-dev.pcpf.panasonic.com
*.693026063419.dev.cirrus.panasonic.com
active.wkstyle-support.jpn.panasonic.com
home-renovation.panasonic.com
secure5s.scene7.com
forum.na.industrial.panasonic.com
rec.panasonic.com
*.musockets.eu.eww.panasonic.com
cdn-us.panasonic.com
authtrial.cls.jp.panasonic.com
security.panasonic.com
incapsula.com
phcna-ezpay.us.panasonic.com
lyncdiscover.in.panasonic.com
vtsupport.panasonic.com
uat.cirrus.panasonic.com
origin-ca.na.panasonic.com
homes-tomonokai.jpn.panasonic.com
innovation.panasonic.com
webhains-bat.phio.jp.panasonic.com
care.in.panasonic.com
eu.connect.panasonic.com
aquarea-service.panasonic.com
*.uat.cirrus.panasonic.com
unitedi.jpn.panasonic.com
plm-dev.energy.jp.panasonic.com
turns.hdvc.in.panasonic.com
logdb-ot.pcpf.panasonic.com
lyncdiscover.za.panasonic.com
dev.shop-365tv.jpn.panasonic.com
*.990132080375.dev.cirrus.panasonic.com
ns91.ewct-test.pisc.jp.panasonic.com
adselfservice.eu.panasonic.com
psirt.vserv.jp.panasonic.com
*.pcpf.panasonic.com
mvss.jpn.panasonic.com
eu.sso.www.panasonic.com
acrosign.jp.eww.panasonic.com
dwstage.business.panasonic.com
sbox.jpn.panasonic.com
pdcpmp01.kdc.pisc.jp.panasonic.com
smetrics.panasonic.com
ctj1.panasonic.com
*.pcpf.panasonic.com
*.panasonic.com
san-15-s51.tlsprovisioning.exacttarget.com
easycare.ch.fcm.travel
laas01vm.3Dsolution.jp.panasonic.com
stg-aquarea-smart.panasonic.com
*.523977587983.dev.cirrus.panasonic.com
automotive.panasonic.com
test.esn.cisc.jp.panasonic.com
f1.panasonic.com
*.eu.panasonic.com
security.panasonic.com
virgo.jp.eww.panasonic.com

Certificate

The complete raw certificate details for eu.industrial.panasonic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1isoi23pAwGTsagp05+o
hwIf78Q1j8xk2tBsmhhsWPO0bpxTGqrkmDYvviMwtjYJ7HWkvW6jaFEyc/lrs94s
N3+Px9iZ3gs/gvlr0DQL4NBwY8qR5BsZecma0dFaQYOFF9c12L5Dnpzo+Fvqqas1
xSJ5IMy/yL6qbj5pc/8cxItgIdyfjv7xxvNX+O8rWPhgbE14rFJDvXWalGoBIITc
IDvT/wqgXnxuoggQznVVc+W7PNx+f7IazwpqdUZE07ijD1CpYNOrOAauf3V6EzP+
bGXDFKjvINhpHSPwjRxHqexs+skyfAWkFJ1OFlSStPPOgf/b7AOXCcoXdTdlPkkr
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3882222371833738483611407667875724690
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eu.industrial.panasonic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27036279451891109007921791829351191849886098356746863207004151441071599558523973408259227535228566291673597716087425994440587525252163109369999913495610254946135055670404107279100188902766501802952179177323910251629482247799283480033571290592299308033696137277136639920158835344196347407519199419518894187656056517735218014286403007711391485564152045809710368770406736389008211615994495293531902384794098723185030087561011251896682381134937168994039703435111635594953990616474791228759691614923946974569032882083027196724429694807958598334487646227051700453646576905806810649473394409043145505238298317726539357694929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1829fe6b4a0f9e820c373f97e0b8d60214ec6579
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.industrial.panasonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.panasonic.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.panasonic.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-psd.panasonic.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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