wm.auone.jp

- KDDI Corporation -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 3e:be:5e:31:fa:b4:d0:f0:69:62:07:4d was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

KDDI Corporation

Organization: KDDI Corporation
Organization unit: System Management Department
State / Province: Tokyo
Locality: Shibuya
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:be:5e:31:fa:b4:d0:f0:69:62:07:4d
Serial Number (int): 19418211339055316898817378125
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: de:27:9d:33:94:3f:2c:90:8f:5a:9e:75:d3:c8:41:df:df:5f:ee:ba
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 2c:90:7a:14:ec:72:7a:78:83:ef:5c:20:ce:8c:91:e4:41:11:bc:ab
Fingerprint (sha256): 02:4d:8d:48:bf:3b:ab:27:45:c3:ef:7e:e6:30:e4:bc:6b:85:d2:7d:6b:d1:a7:81:0a:ad:b4:11:c8:7b:14:98

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate wm.auone.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wm.auone.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wm.auone.jp

Other certificates including the domain name auone.jp

(limited to 100 certificates)
adc.auone.jp
test.ap.connect.auone.jp
test3.id.auone.jp
cc2.connect.auone.jp
admin.enjoy.point.auone.jp
scr.cs1.auone.jp
stg.toto.auone.jp
*.osusume.auone.jp
www.maestro.io
*.stg.pass.auone.jp
jas.fn.auone.jp
spcamp.auone.jp
point.ideco.auone.jp
front.new.api.support.pass.auone.jp
support5.cdnetworks.net
test.rec-cloud.auone.jp
support5.cdnetworks.net
apl.opo.auone.jp
support12.cdnetworks.net
jpssl.cdngc.net
support12.cdnetworks.net
jpssl.cdngc.net
cs.auone.jp
support12.cdnetworks.net
shop.wm.auone.jp
connect.auone.jp
app2.wallet.auone.jp
akamai-san20.exacttarget.com
dev.hl.auone.jp
cc2.ip.connect.auone.jp
support5.cdnetworks.net
dev.exchange.point.auone.jp
utapre.auone.jp
stg.portal.game.habits.auone.jp
support5.cdnetworks.net
anshinnaviapp.xx.auone.jp
game.auone.jp
support12.cdnetworks.net
point.ideco.auone.jp
support12.cdnetworks.net
*.game.auone.jp
support5.cdnetworks.net
star-00.auone.jp
s.auone.jp
support12.cdnetworks.net
djlrecommend.auone.jp
api.games.stg.pass.auone.jp
mcmc.k3.engage.auone.jp
support12.cdnetworks.net
api.game.auone.jp
support5.cdnetworks.net
wm.auone.jp
*.search.auone.jp
wallet-inv-origin.auone.jp
au-cloud-api.auone.jp
sphi.auone.jp
ad.au-cloud-api.auone.jp
stg-point.ideco.auone.jp
stgaddress.kenshou.auone.jp
sec.auone.jp
www.maestro.io
sp-st.news.search.auone.jp
api.stg.info.wallet.auone.jp
tokuten.auone.jp
san-10-s11.tlsprovisioning.exacttarget.com
www.maestro.io
wl.auone.jp
au-photo.auone.jp
*.tokuten.auone.jp
faq.autravel.auone.jp
test.att-cloud.auone.jp
www.maestro.io
friendsnote2.kenshou.auone.jp
stg.resource.widget.auone.jp
reg.okozukai.auone.jp
temp.connect.auone.jp
touchtest.eznavi.auone.jp
auok.auone.jp
support12.cdnetworks.net
pushinfo.wallet.auone.jp
promotion.auone.jp
tokuten.auone.jp
*.auone.jp
ez.star.auone.jp
support5.cdnetworks.net
kantan-cpn.auone.jp
campaign.auone.jp
v-account.mobile.auone.jp
test.front.agent.api.support.pass.auone.jp
live.k1.engage.auone.jp
jpssl.cdngc.net
ideco.auone.jp
jpssl.cdngc.net
stg.game.auone.jp
www.maestro.io
test.wallet.auone.jp
ip.pbl.auone.jp
st.oa.connect.auone.jp
v-account.mobile.auone.jp
auok.auone.jp

Certificate

The complete raw certificate details for wm.auone.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dlejIIdg9KjjQvUIix7
E56Yy2pQVH08mrcPTiIpEtrmMDIB2WxzsmBqB/X4KMBQF2/Md0TSicVRe60IKMlw
Tm9hxYCT98HLz0xywf3HKaGjXS83wweEcKF1NW14BJhhr2quhi0OANYlIKs9T+TA
bzv6gdXqcHCj0gaQPeuSuqhFAq402Y3FJk2ifB8rZVtGO1w8RJ0VfWojrKNUMkBI
y9GKAWJiq8+fvtphHlfPTFHyQwgt2ssv2glr/g3kmh33UTqzmuBTA6xBnJPPEroH
wHGTN6Uzhsblx7RLhjYXgcr1vsN+pt64cQnUG37Su7V6ZmzrDNtPlAgoBGTvAm/Q
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19418211339055316898817378125
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 05:30:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-29 01:35:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shibuya'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'System Management Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KDDI Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'wm.auone.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26995947770107951218689692117730533119870983012551648361341822983728268606852887654888555001269303573846631833561926250798458138056193176781155359725600457024210640040026785264245463434166958147436813379292853357424674491891660393948582069270650262885431902232757954270353305219309963702623472538263656175398074777921288939387969968440656705165215460038440380956609020218483450024025155954685909007589325726151317288197536815629520131768481754124423218175343939950710411784730220044135829349143436066066697865522452751984507757846881587389105851788434182974806177012062578737000229826972582855965839274326132790382843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm.auone.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de279d33943f2c908f5a9e75d3c841dfdf5feeba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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