scr.cs1.auone.jp

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:12:de:7e:d0:15:bd:39:6d:29:9d:bd:b9:da:34:31 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=scr.cs1.auone.jp

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:12:de:7e:d0:15:bd:39:6d:29:9d:bd:b9:da:34:31
Serial Number (int): 1427202081318193310005356804714411057
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 4a:45:a0:71:2f:14:4d:f5:0b:0b:e4:a8:c5:19:c4:82:ea:e8:44:c2
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 44:1c:a3:b2:d5:12:5f:c6:1b:08:5b:92:9d:a6:43:42:b7:34:0c:35
Fingerprint (sha256): 00:5e:30:f3:aa:ab:04:83:f3:3c:a5:07:cd:6f:ac:0a:62:51:f3:ad:c6:38:97:42:12:c7:9c:76:64:ef:ea:8e

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate scr.cs1.auone.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scr.cs1.auone.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scr.cs1.auone.jp

Other certificates including the domain name auone.jp

(limited to 100 certificates)
adc.auone.jp
test.ap.connect.auone.jp
test3.id.auone.jp
cc2.connect.auone.jp
admin.enjoy.point.auone.jp
scr.cs1.auone.jp
stg.toto.auone.jp
*.osusume.auone.jp
www.maestro.io
*.stg.pass.auone.jp
jas.fn.auone.jp
spcamp.auone.jp
point.ideco.auone.jp
front.new.api.support.pass.auone.jp
support5.cdnetworks.net
test.rec-cloud.auone.jp
support5.cdnetworks.net
apl.opo.auone.jp
support12.cdnetworks.net
jpssl.cdngc.net
support12.cdnetworks.net
jpssl.cdngc.net
cs.auone.jp
support12.cdnetworks.net
shop.wm.auone.jp
connect.auone.jp
app2.wallet.auone.jp
akamai-san20.exacttarget.com
dev.hl.auone.jp
cc2.ip.connect.auone.jp
support5.cdnetworks.net
dev.exchange.point.auone.jp
utapre.auone.jp
stg.portal.game.habits.auone.jp
support5.cdnetworks.net
anshinnaviapp.xx.auone.jp
game.auone.jp
support12.cdnetworks.net
point.ideco.auone.jp
support12.cdnetworks.net
*.game.auone.jp
support5.cdnetworks.net
star-00.auone.jp
s.auone.jp
support12.cdnetworks.net
djlrecommend.auone.jp
api.games.stg.pass.auone.jp
mcmc.k3.engage.auone.jp
support12.cdnetworks.net
api.game.auone.jp
support5.cdnetworks.net
wm.auone.jp
*.search.auone.jp
wallet-inv-origin.auone.jp
au-cloud-api.auone.jp
sphi.auone.jp
ad.au-cloud-api.auone.jp
stg-point.ideco.auone.jp
stgaddress.kenshou.auone.jp
sec.auone.jp
www.maestro.io
sp-st.news.search.auone.jp
api.stg.info.wallet.auone.jp
tokuten.auone.jp
san-10-s11.tlsprovisioning.exacttarget.com
www.maestro.io
wl.auone.jp
au-photo.auone.jp
*.tokuten.auone.jp
faq.autravel.auone.jp
test.att-cloud.auone.jp
www.maestro.io
friendsnote2.kenshou.auone.jp
stg.resource.widget.auone.jp
reg.okozukai.auone.jp
temp.connect.auone.jp
touchtest.eznavi.auone.jp
auok.auone.jp
support12.cdnetworks.net
pushinfo.wallet.auone.jp
promotion.auone.jp
tokuten.auone.jp
*.auone.jp
ez.star.auone.jp
support5.cdnetworks.net
kantan-cpn.auone.jp
campaign.auone.jp
v-account.mobile.auone.jp
test.front.agent.api.support.pass.auone.jp
live.k1.engage.auone.jp
jpssl.cdngc.net
ideco.auone.jp
jpssl.cdngc.net
stg.game.auone.jp
www.maestro.io
test.wallet.auone.jp
ip.pbl.auone.jp
st.oa.connect.auone.jp
v-account.mobile.auone.jp
auok.auone.jp

Certificate

The complete raw certificate details for scr.cs1.auone.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5x3N6X0FEDk1XvoTz+DF
H5AyIBQOA6cVZW8AZXUQ47EDZ9GAvkXpSbq+gok/Bg2s604ZjoDaLio67fB9f/PL
eHMh7g53CXncip2eecXpSPqhoe7kHQlyDVmph/5yfk4+MhJroHtCOm2SxWQrHiN8
L4uHcfoy13Knmp1ippitsUz1SV7t1aNSUazXulhHHh99lsG34ODaexsQjFTEB3GJ
VBCvudP+xUgmHwAbap8VsXPxAm+3j/TiKnWAApN9+1o3xl7l5DTUDS4mV5qn4Ejc
EvucTTXxWH5Zxe9ZPpH5Ok4d6m4jFmJ2kvfkY08hFTqd24D3+FpQTOj54qZwyOEQ
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1427202081318193310005356804714411057
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scr.cs1.auone.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29175745516953042608695522300699988761495116711648702647693989674200375851759404238072099996196951572486838218705172762633690126751105635939990259463021671986112247456823763106120328408093799984204087373212774276777525003568987661889257374526541746260121077711130167377877583567636164365919908821617170486390869500431735956695196863713105192725842163515560512610935569995955875625520090598637015140783910724807203638655403456424471882067777919726887212066122867769804518165226428443887328580711256634393430590382008860386088786431698737590717837357925462541258871551827903927191383808283006915753929120245623312945211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a45a0712f144df50b0be4a8c519c482eae844c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scr.cs1.auone.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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