adm.dev4.fashion.dmkt-sp.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 01:3a:7f:0c:f9:5a:54:c0:42:ec:79:c5:33:36:e7:a2 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=adm.dev4.fashion.dmkt-sp.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:3a:7f:0c:f9:5a:54:c0:42:ec:79:c5:33:36:e7:a2
Serial Number (int): 1632958107508520803336493400323450786
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 46:d2:ec:42:78:52:56:7d:35:67:ad:30:6e:c1:91:34:51:35:5f:31
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 87:6c:32:ba:d2:f5:c2:b0:65:4b:a3:fe:75:6f:3e:3e:e6:30:37:7b
Fingerprint (sha256): 00:d7:de:31:11:1e:40:a6:6d:33:a2:9d:91:29:9a:29:db:aa:e1:d4:26:8d:41:60:96:a7:86:6e:82:7b:35:6a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate adm.dev4.fashion.dmkt-sp.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adm.dev4.fashion.dmkt-sp.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adm.dev4.fashion.dmkt-sp.jp

Other certificates including the domain name dmkt-sp.jp

(limited to 100 certificates)
www.dmkt-sp.jp
img.fashion.dmkt-sp.jp
apl.d.dmkt-sp.jp
dev-wv.anime.dmkt-sp.jp
adm.dev1.fashion.dmkt-sp.jp
entry.dmkt-sp.jp
sys.kids.dmkt-sp.jp
avatar-mgmt.sandbox.dmkt-sp.jp
dev3.shopping.dmkt-sp.jp
sug.stg.dtv.dmkt-sp.jp
api-selection.music.dmkt-sp.jp
test-stg.music.dmkt-sp.jp
dev9.shopping.dmkt-sp.jp
adm.dev4.fashion.dmkt-sp.jp
public-test-ts03.dev.mealkit.dmkt-sp.jp
aacdn.jp
stg.prx.cp07.kids.dmkt-sp.jp
notification.selection.music.dmkt-sp.jp
mdl.travel.dmkt-sp.jp
dev-garelay.dmkt-sp.jp
leo-pre2.dev.d.dmkt-sp.jp
creators.dmkt-sp.jp
stage.selection.music.dmkt-sp.jp
ibcms-orijin-elb.sw.job.dmkt-sp.jp
travel.dmkt-sp.jp
dev-rsm.anime.dmkt-sp.jp
dev-rsm.anime.dmkt-sp.jp
b51-czstb-p010.dev.sw.job.dmkt-sp.jp
music.dmkt-sp.jp
develop.monthly.music.dmkt-sp.jp
cms.dev4.fashion.dmkt-sp.jp
develop-api.music.dmkt-sp.jp
id-credit.com
rmsprev.dev9.shopping.dmkt-sp.jp
cs1.anime.dmkt-sp.jp
dev-stg.anime.dmkt-sp.jp
*.kids.dmkt-sp.jp
book.dmkt-sp.jp
stg.ovstp.travel.dmkt-sp.jp
sms.living2.dmkt-sp.jp
sys.kids.dmkt-sp.jp
garelay.dmkt-sp.jp
dev.shopping.dmkt-sp.jp
tv.video.dmkt-sp.jp
*.video.dmkt-sp.jp
cpsupport.test.dgame.dmkt-sp.jp
dch.dmkt-sp.jp
delivery.dmkt-sp.jp
stg.gourmet.dmkt-sp.jp
k11-cmw.dev.d.living.dmkt-sp.jp
tv.video.dmkt-sp.jp
stlog-stg.stg.d.dmkt-sp.jp
alb3.sandbox.dgame.dmkt-sp.jp
kv.anime.dmkt-sp.jp
a.anime.dmkt-sp.jp
api.rmsstag.dev3.shopping.dmkt-sp.jp
b21-ibcms.dev.sw.job.dmkt-sp.jp
b12-ibcms-orijin-elb.dev.sw.job.dmkt-sp.jp
mdl.travel.dmkt-sp.jp
a21-iacmw.dev.gp.dmkt-sp.jp
rec.d.dmkt-sp.jp
iacmw-origin-elb.stg.gp.dmkt-sp.jp
entry.stg.data.dmkt-sp.jp
prx.cp07.kids.dmkt-sp.jp
ath-connect.dev1.fashion.dmkt-sp.jp
aacdn.jp
ai-try.gourmet.dmkt-sp.jp
b11-ibopp.dev.sw.job.dmkt-sp.jp
admin.travel.dmkt-sp.jp
gp.dmkt-sp.jp
a12-version-check.dev.gp.dmkt-sp.jp
store-stlog.d.dmkt-sp.jp
*.kids.dmkt-sp.jp
sea2.d.dmkt-sp.jp
stub.prt-connect.dev1.fashion.dmkt-sp.jp
*.dmusic.dmkt-sp.jp
stg.travel.dmkt-sp.jp
leo-pre.d.dmkt-sp.jp
admin.shopping.dmkt-sp.jp
test-com04.dev.mealkit.dmkt-sp.jp
dev2-rsm.anime.dmkt-sp.jp
b12-cbexc.dev.sw.job.dmkt-sp.jp
develop-magazine-service.dmkt-sp.jp
anime.dmkt-sp.jp
rmsstag.dev3.shopping.dmkt-sp.jp
b51-czstb-p011.dev.sw.job.dmkt-sp.jp
*.dkids.docomo.ne.jp
api.rmsstag.dev1.shopping.dmkt-sp.jp
aalmcdn.jp
adm.dev4.shopping.dmkt-sp.jp
stg.prx.cp07.kids.dmkt-sp.jp
bill.stg.dgame.dmkt-sp.jp
dev2-pc.video.dmkt-sp.jp
mng.dev.ec.anime.dmkt-sp.jp
front.stg.pt.dmkt-sp.jp
aacdn.jp
dev.dl.kids.dmkt-sp.jp
c1.d.dmkt-sp.jp
aacdn.jp
staging.shopping.dmkt-sp.jp

Certificate

The complete raw certificate details for adm.dev4.fashion.dmkt-sp.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pZ9Lv0gVI4L6aFM7SLf
sWK9YppPju22LW7waQQuA0whrrhw4uDj97d14TBej9SRPQYr2MAAUqzhqeLpffO4
J5rBPHKDL120Pf1Wr7gTFKXRXgV5FTtlIyuHBudjI9KiNX9KT57n7h4lajT5sCMK
kKvqmm2oSZ0x/zomD5bCV91XNvx8EY9LSgQjS5QALMyS/YNOHajiXJwPX05lbxNG
g7F4M+26p1VQnXdItgDE0Pf+rvINta9sDRkZMvaMFcIEAChjjdTdua0ei4knWlNd
pRf1Xr88s8U/RdyeX9x2Tm6j1N/7haWIgLTlrHHG1uSLJaQwBuCQRa3ETe7+ZTpU
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1632958107508520803336493400323450786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adm.dev4.fashion.dmkt-sp.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28604065813165517942528582913825998993927086509932662461250602040458580554751137244603786511757894388662736457584360730377962923908932083811556418409470368380017270722067596753558804337902571361396316208000230870270215341632688122777908067741559769872293691678315484801505042227480466267345711201286545736693344322172286733047040906156280461472024190803717469849144637382922635241573381525947432941421372186325828321015713992773542974905449261393571571125096004273998155367213192496464139593476819842252350058645089127942430671151080446768263237881604653027599576801754969726954997888616263892944583038833642297775269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46d2ec427852567d3567ad306ec1913451355f31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm.dev4.fashion.dmkt-sp.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00801a183948c476aa683ab6bdeece74ae7e064734793e1efa782cf4989a5c249c00f77e37472829f0da20dc4b6d36f67900967d09366e85237096e70506d7713fbad268b4353a242d5e6c15b6844d34cea81e028bafe0d200f69662ee460df48d3436d224528f48ccab773b34110ec2d30c679383bbeef575a415cfeba295ed1ec49b7cdd2fdfac8f9654b670b675bd957d2d1c16882b97ca735360d62828835a1afccc750a775afb0c3a963cc46f738bdc980a5c2ea0e9b1b0bef70fa7ecb7e989f9c6c44a1927703131e30b1e85efc57e2cca4248366fc58de3f1c7dc86d2648b76167158bbce8998d152e79a3bf9d4bda83230ef03da75ee534b7b86c6135d