www.shizuoka.jrc.or.jp

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 7c:63:42:fa:b4:cc:ee:0e:30:df:5a:a7 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.shizuoka.jrc.or.jp

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:63:42:fa:b4:cc:ee:0e:30:df:5a:a7
Serial Number (int): 38496141174890574200933669543
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 51:89:2f:7d:56:e9:7c:6d:85:96:ef:ab:90:47:a2:22:a1:58:30:33
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 3c:c7:ff:b2:37:98:84:8a:fb:fb:b5:91:b9:c1:b0:a3:c4:27:b5:4f
Fingerprint (sha256): 01:06:56:be:5c:41:d9:9d:ff:be:f5:48:07:50:bf:02:f6:91:46:a6:55:5b:69:0c:fb:15:be:56:37:30:c5:9b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.shizuoka.jrc.or.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.shizuoka.jrc.or.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.shizuoka.jrc.or.jp
shizuoka.jrc.or.jp

Other certificates including the domain name jrc.or.jp

(limited to 100 certificates)
www.nagoya-1st.jrc.or.jp
www.maebashi.jrc.or.jp
www.tkhr.bbc.jrc.or.jp
www.matsuyama.jrc.or.jp
www.nagasaki-med.jrc.or.jp
www.shizuoka.jrc.or.jp
fukuoka-med.jrc.or.jp
www.hokkaido.jrc.or.jp
www2.nagoya2.jrc.or.jp
www.hyogo.jrc.or.jp
www2.nagoya2.jrc.or.jp
?.?.jrc.or.jp
www.shizuoka.jrc.or.jp
ken-online.tkhr.bbc.jrc.or.jp
www.bs.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
trk.bmdc.jrc.or.jp
www.nagoya2.jrc.or.jp
www.shizuoka.jrc.or.jp
ehime.jrc.or.jp
www.gifu-med.jrc.or.jp
www.shizuoka.jrc.or.jp
www.omori.jrc.or.jp
masuda.jrc.or.jp
www.koga.jrc.or.jp
www.nagasaki-med.jrc.or.jp
www.saitama.bc.jrc.or.jp
www.yamanashi.bc.jrc.or.jp
app-ndrc.jrc.or.jp
ashikaga.jrc.or.jp
katsushika.jrc.or.jp
date-kango.jrc.or.jp
www.aichi.jrc.or.jp
kochi-med.jrc.or.jp
www.kumamoto.jrc.or.jp
www.saitama.bc.jrc.or.jp
www.okayama-med.jrc.or.jp
www.koga.jrc.or.jp
www.bs.jrc.or.jp
www.asahikawa.jrc.or.jp
www.otsu-sn.jrc.or.jp
www.kyoto.bc.jrc.or.jp
www.kyoto2.jrc.or.jp
www.nagasaki-med.jrc.or.jp
niigata.jrc.or.jp
www.shizuoka.jrc.or.jp
trk.bmdc.jrc.or.jp
cybozugaroon.bsh.jrc.or.jp
www.osaka-med.jrc.or.jp
niigata.jrc.or.jp
www.med.jrc.or.jp
www.nagano.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
www.matsuyama.jrc.or.jp
ashikaga.jrc.or.jp
fukushima.jrc.or.jp
www.chiba.jrc.or.jp
www.shiga.jrc.or.jp
www.shizuoka.jrc.or.jp
www.nagahama.jrc.or.jp
ajis.jrc.or.jp
kenshingw.nagoya2.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
www.matsue.jrc.or.jp
www.koga.jrc.or.jp
*.wakayama-med.jrc.or.jp
musashino.jrc.or.jp
saitama.jrc.or.jp
www.shobara.jrc.or.jp
www.nagoya-1st.jrc.or.jp
www.kobe.jrc.or.jp
webmail.kumamoto-med.jrc.or.jp
www.nagoya-1st.jrc.or.jp
www.tokushima-med.jrc.or.jp
www.yamagata.bc.jrc.or.jp
www.kyoto.bc.jrc.or.jp
www.hokkaido.bc.jrc.or.jp
saitama.jrc.or.jp
www.maebashi.jrc.or.jp
www.tokyo.bc.jrc.or.jp
www.hokkaido.bc.jrc.or.jp
www.fukaya.jrc.or.jp
www.shizuoka.jrc.or.jp
www.takamatsu.jrc.or.jp
ssl.ishinomaki.jrc.or.jp
www.shizuoka.jrc.or.jp
www.narita.jrc.or.jp
photogallery.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
www.azumino.jrc.or.jp
www.nagano.jrc.or.jp
www.takamatsu.jrc.or.jp
www.shizuoka-med.jrc.or.jp
ajis.jrc.or.jp
fukuoka-med.jrc.or.jp
www.osaka-med.jrc.or.jp

Certificate

The complete raw certificate details for www.shizuoka.jrc.or.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDZ7UMdflofTuJFXlGQP
x1qABZN6DMJuxyKj5fsCfG2Pp5aHjxCVYC8VPwcNQkJMoeLhK/VIUolrpqGiU5Xl
PYv2fNbC1a6dgXzsg2HWn/RQ77iUh3ASZymJIQS/0Xg0sRUR/KcuVqmdyr2Sf1HY
O4pyWCxOxJ/MbvIh3InhL/EQDoBdtjZMDCBsXE4s5ggtUDINtDxFKHE1QgPwAJJA
+wjWfoHrnlIoAmhTz83ihzMwgaqd46HAuo9sjxTeqnpafjOsy0AvEnyIeVH3g23v
of9tnNJ6ZMrjf5GfDMKn4mDa3c/NxAQvNmZF2ZZSCNrbOButMgYTO7zvtMu0SazA
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38496141174890574200933669543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-07 17:07:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-12 01:25:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.shizuoka.jrc.or.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23759667261855008117968228674145820318841390043986901379402541538915110434721174566597464755452919430097801271827139790048433983625629033610702282183586047401739281280979924042016698639002941722069041210803708651623994942888074254236519933470538278201977987484952941256906990941114362190359014445356307696487415409833722547274841396892783842590538184453769419930017527254742908057144142246381270549362092492915436352705360461447354803116840966404089417911327029648331375790760894065280641615620213604882002896351912031834308772549854335517455757994294981504256440076977321344854121330942705257793170251568000499761223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shizuoka.jrc.or.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shizuoka.jrc.or.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51892f7d56e97c6d8596efab9047a222a1583033
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001777d763b1c0000040300463044022034a0543e0e804a1a0ed150f3920e7cb1657831f0936f408244d21403bb2abb2f0220510216b3025bd59312a14a6c7232147be4dfb7402d9b99314112e764a1dbbd6b0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001777d763af80000040300473045022100d7beb024b848fee404294f34202792fe9fdbfeee3b5dac1d0d042b3a491d72eb022040d85cba6acdb7731e7ab52412fdd309f1500e4dfbc14310412bbc32abf897b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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