x130.secure.ne.jp

- KDDI Web Communications Inc. -

Issued by Servision Certification Authority

About this certificate

This digital certificate with serial number 4c:45:0f:28:c0:2c:e8:85 was issued on by Servision Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

KDDI Web Communications Inc.

Organization: KDDI Web Communications Inc.
State / Province: Hosting Service
Locality: Instant CPI SSL
Country: JP

Servision Inc.

Organization: Servision Inc.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:45:0f:28:c0:2c:e8:85
Serial Number (int): 5495815587972835461
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 89:2c:0f:29:c7:c7:84:90:5e:65:e0:87:50:d9:cd:83:ba:b8:95:d5
AuthorityKeyId: 04:35:f9:47:b1:ee:2b:a2:55:09:ae:30:5b:b7:90:ca:ac:57:5d:c7

Fingerprint (sha1): 0d:ad:a4:46:ab:70:29:6b:06:8d:70:c3:bd:ac:11:e8:ff:ab:13:e9
Fingerprint (sha256): 00:d0:0d:f4:af:d1:25:f3:8a:9f:7c:25:ee:15:c3:cc:84:55:12:34:c1:be:0f:5a:df:31:ee:2b:7b:96:33:fb


Revocation information

CRL Distribution Point: http://repo1.secomtrust.net/sppca/servision/fullCRL.crl

Check the revocation status for certificate x130.secure.ne.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for x130.secure.ne.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

x130.secure.ne.jp

Other certificates including the domain name secure.ne.jp

(limited to 100 certificates)
x173.secure.ne.jp
s190.secure.ne.jp
s127.secure.ne.jp
x347.secure.ne.jp
xb202.secure.ne.jp
x480.secure.ne.jp
staging.sr.secure.ne.jp
xb301.secure.ne.jp
x346.secure.ne.jp
m209.secure.ne.jp
x130.secure.ne.jp
g302.secure.ne.jp
xa124.secure.ne.jp
z106.secure.ne.jp
xa131.secure.ne.jp
x346.secure.ne.jp
x266.secure.ne.jp
s118.secure.ne.jp
aa222.secure.ne.jp
m211.secure.ne.jp
s208.secure.ne.jp
s402.secure.ne.jp
gt201.secure.ne.jp
s102001.secure.ne.jp
s301.secure.ne.jp
z143.secure.ne.jp
cvps-158-199-195-137.secure.ne.jp
s138.secure.ne.jp
s125.secure.ne.jp
gt161.secure.ne.jp
g630.secure.ne.jp
x156.secure.ne.jp
xb102.secure.ne.jp
xa130.secure.ne.jp
g640.secure.ne.jp
aa107.secure.ne.jp
m204.secure.ne.jp
x601.secure.ne.jp
x176.secure.ne.jp
m128.secure.ne.jp
z203.secure.ne.jp
x180.secure.ne.jp
s105.secure.ne.jp
gt161.secure.ne.jp
chm11ztest.secure.ne.jp
aa118.secure.ne.jp
gt401.secure.ne.jp
s129.secure.ne.jp
xa109.secure.ne.jp
s204.secure.ne.jp
xa113.secure.ne.jp
g108.secure.ne.jp
s128.secure.ne.jp
x190.secure.ne.jp
m123.secure.ne.jp
xa113.secure.ne.jp
xb106.secure.ne.jp
gt106.secure.ne.jp
s120.secure.ne.jp
x106.secure.ne.jp
zz131.secure.ne.jp
x441.secure.ne.jp
z301.secure.ne.jp
xa132.secure.ne.jp
x270.secure.ne.jp
xa120.secure.ne.jp
s302.secure.ne.jp
xb116.secure.ne.jp
xb203.secure.ne.jp
g402.secure.ne.jp
s126.secure.ne.jp
gt302.secure.ne.jp
gt109.secure.ne.jp
aa194.secure.ne.jp
x150.secure.ne.jp
aa156.secure.ne.jp
*.secure.ne.jp
x279.secure.ne.jp
gt503.secure.ne.jp
xa138.secure.ne.jp
information.secure.ne.jp
g643.secure.ne.jp
s109.secure.ne.jp
s121.secure.ne.jp
gt401.secure.ne.jp
x250.secure.ne.jp
x274.secure.ne.jp
x173.secure.ne.jp
x280.secure.ne.jp
z141.secure.ne.jp
z303.secure.ne.jp
m117.secure.ne.jp
g636.secure.ne.jp
gt161.secure.ne.jp
s108.secure.ne.jp
xa112.secure.ne.jp
m139.secure.ne.jp
g109.secure.ne.jp
g303.secure.ne.jp
s106.secure.ne.jp

Certificate

The complete raw certificate details for x130.secure.ne.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mZHxhlgCpMxCxLbA+6o
1MeqgMsSF7FjeraPPJcRqrRK/diBrGCUuXuyhmV16iVDQ+MghTinTZDZCXExKNHS
0e6CohhWgahqHfBsg0O/VsobIMapxfw6Nz8b6Ev9sBbYCUClXeFezJ9WPNTQSD95
eaZw/e1vM1HHOrW0oO7js99D/avgEsSkxHj4od7YpRdJFwv0U7sp4McxkiQyu3Bc
tNrXYsRIz0kIxlzNMMFC1obtHRWE/K5iHHH6RSwSh3q6ThBzB6rjsz0vEMKKXm9O
02a0bZkNnqhWGVGaCzKUbCJrc55aOCrgTvjn9yIz+29A0/prtIu0jHIkq2lhRxto
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5495815587972835461
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Servision Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Servision Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-24 03:23:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-08 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Instant CPI SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KDDI Web Communications Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'x130.secure.ne.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27065433591246738859991921946267210078036566953159669069855433853591797972506203989707698571272217762269108427937152321595163949704732040070081460213495393736293983411170986608099197123078236537155168390922555231099351391763010593034560104345049931544132123782972448400610525323098324179782201408146169504318155210184785574162757547259990959695921039511329316927163715715747083192376086350715837464915019314977163745459839767319118423606235285898049959640619845987178681669403185260844876368109466179567042747759763553216046030406367465066769221353240608796671349730778784500426647767675054349291908731018437501610087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							892c0f29c7c784905e65e08750d9cd83bab895d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0435f947b1ee2ba25509ae305bb790caac575dc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x130.secure.ne.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.141.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/servision/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/servision/fullCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							0640
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005b882b688411fb99714147d7fb6bf052c3f1ff33870158f6eb49bd599b97dde99b6d1e9a4525055a2048a29b70b9996b59fa14a77bc6042e5cf4a98cb1468680c9fc441767822e02d149f8218bbe9a1531a9b3e9afcc47a3c762388d2a376e01076dccc1e38f2fc047d89b94be8771d3de717c89e2d9fd07e37fa178ec1358a5e2e15b0477e2a851c0e045c1384fb4444e072d3afb8f1174ea962bf31565ff869059fe08cf4461701888652e11f560019e196b8e55bb876f7cb02eb8f5dbe20d64a277032fffb88c9803922b3b968666c19be789519c93fec6da6c3a6cef2ce540450d0a991dfd3818039be1a3c86e57351c8c2994c461edc68d2196e69689b8