portal2.zto-stg.docomo.ne.jp

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:94:58:4e:fb:52:5f:ce:ca:4d:25:54:91:ec:af:ac was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=portal2.zto-stg.docomo.ne.jp

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:94:58:4e:fb:52:5f:ce:ca:4d:25:54:91:ec:af:ac
Serial Number (int): 12733303006749516626560928910521708460
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f0:a1:27:a8:47:22:7c:e7:c3:26:17:54:27:9b:56:bd:ca:f5:11:58
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 37:57:08:bf:c7:40:c6:3c:0c:a9:04:8a:25:f9:f6:82:12:c2:43:72
Fingerprint (sha256): 02:72:a6:de:71:07:b9:bf:2d:61:07:34:6f:2b:5e:cc:30:9b:ac:4e:01:21:31:3e:3a:62:4c:e6:3b:1d:36:7c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate portal2.zto-stg.docomo.ne.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal2.zto-stg.docomo.ne.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal2.zto-stg.docomo.ne.jp

Other certificates including the domain name docomo.ne.jp

(limited to 100 certificates)
ve.m.carddav.phonebook.smt.docomo.ne.jp
www.oppgaver.net
ve.m.cfg.spmode.smt.docomo.ne.jp
docomo.myshop.smt.docomo.ne.jp
*.docomo.ne.jp
vim-fn-36-fn.mano.docomo.ne.jp
ve.m.reservationm.ald.smt.docomo.ne.jp
www.f-packet.tt.docomo.ne.jp
fsrlin.docomo.ne.jp
ve.m.cfg.spmode.smt.docomo.ne.jp
vim-fn-8-fn.mano.docomo.ne.jp
md.t.dcash.docomo.ne.jp
*.cache.aif.l.cilite.docomo.ne.jp
affiliate.docomo.ne.jp
*.aihoken.web.docomo.ne.jp
ve.m.otoiawase.smt.docomo.ne.jp
vim-fn-1-fn.mano.docomo.ne.jp
shared-certificate.user-space.cdn.idcfcloud.net
vim-fn-onk-a-fn.mano.docomo.ne.jp
vim-cic-31-nbi.mano.docomo.ne.jp
ve.m.d-cardm.smt.docomo.ne.jp
ve.m.dmenu.xxxxxx.docomo.ne.jp
ve.m.reservationm.ald.smt.docomo.ne.jp
vim-fn-29-fn.mano.docomo.ne.jp
ve.m.spmode.smt.docomo.ne.jp
www.mymenu.docomo.ne.jp
id-credit.com
dev-cdn.smt.docomo.ne.jp
tsunagari-ln.tt.docomo.ne.jp
*.sdbackup.smt.docomo.ne.jp
*.dpm-affiliate.docomo.ne.jp
applicationm.ald.smt.docomo.ne.jp
portal2.zto-stg.docomo.ne.jp
*.addlv.smt.docomo.ne.jp
otoiawase.smt.docomo.ne.jp
www.docomo.ne.jp
application.ald.smt.docomo.ne.jp
auth.dev.blue.docomo.ne.jp
ve.m.consolen.anm.smt.docomo.ne.jp
vim-atlas-48-gui.mano.docomo.ne.jp
vim-cic-53-nbi.mano.docomo.ne.jp
ve.m.api.onlineshop.smt.docomo.ne.jp
ve.m.applicationm.ald.smt.docomo.ne.jp
ib.i-concier.docomo.ne.jp
vim-oc-10-nbi.mano.docomo.ne.jp
reserve.myshop.smt.docomo.ne.jp
apprev.smt.docomo.ne.jp
vim-lcm-89-nbi.mano.docomo.ne.jp
akamai-san35.exacttarget.com
*.sdbackup.smt.docomo.ne.jp
shared-certificate.user-space.cdn.idcfcloud.net
support1.smt.docomo.ne.jp
www.docapp.tk
phonebook.smt.docomo.ne.jp
sub-api.device-guide.kikito.docomo.ne.jp
ve.m.consolen.anm.smt.docomo.ne.jp
vim-atlas-65-gui.mano.docomo.ne.jp
devstreaming.smt.docomo.ne.jp
shared-certificate.user-space.cdn.idcfcloud.net
vim-cic-42-nbi.mano.docomo.ne.jp
thebazaar.ml
vim-cic-27-nbi.mano.docomo.ne.jp
ve.m.bmi.smt.docomo.ne.jp
vim-atlas-26-gui.mano.docomo.ne.jp
stg-salesmng.animestore.docomo.ne.jp
sg.adm.docomo.ne.jp
ve.m.reserve.myshop.smt.docomo.ne.jp
stab.t.dcash.docomo.ne.jp
ve.m.bcp-payment1.smt.docomo.ne.jp
shared-certificate.user-space.cdn.idcfcloud.net
ve.m.dmkt.smt.docomo.ne.jp
vim-cic-69-nbi.mano.docomo.ne.jp
ibodymo-in.tt.docomo.ne.jp
api.smt.docomo.ne.jp
*.sdbackup.smt.docomo.ne.jp
ve.m.purchase.ald.smt.docomo.ne.jp
stg-monex.docomo.ne.jp
vim-atlas-26-gui.mano.docomo.ne.jp
anm.smt.docomo.ne.jp
ichannel1.smt.docomo.ne.jp
ve.m.bcp-payment2.smt.docomo.ne.jp
dev-cdn.service.smt.docomo.ne.jp
vim-atlas-2-gui.mano.docomo.ne.jp
account-api.smt.docomo.ne.jp
ichannel2.smt.docomo.ne.jp
payment1.smt.docomo.ne.jp
vim-cic-42-nbi.mano.docomo.ne.jp
i-portal.docomo.ne.jp
pre-reservem.ald.smt.docomo.ne.jp
dev.tmp.dmarket.docomo.ne.jp
app.baseball.sports.smt.docomo.ne.jp
ve.m.reservem.myshop.smt.docomo.ne.jp
www.aryse.com
stg-glb.smt.docomo.ne.jp
ve.m.payment2.smt.docomo.ne.jp
vim-cic-65-nbi.mano.docomo.ne.jp
ve.m.applicationm.ald.smt.docomo.ne.jp
view.deep.docomo.ne.jp
ve.m.twf.smt.docomo.ne.jp
maina-develop.api.front-dev.smt.docomo.ne.jp

Certificate

The complete raw certificate details for portal2.zto-stg.docomo.ne.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtATt6lCasuel4RPwPKC6
wHWOk7cr+L7cvVahZ5NbCflpv7L0JYIFwfLjpmAJ9BjgI0BMHDMmVbRiNkMq1kFY
r3RwnF+YzFHjyQ4ci1bAXfrnwPtunNg8ZSaW66xV3vnECl0AiZ66bphlS97GL4Qd
1WlZms+dc8dBbrDYWvjqf8QUSNSUUbW6VJZGQiEnT9m3q1UDsJKlTkyq6ibz6QKX
45dtyKluoofKH7h0lszFA8yFJeUPNo4xmrr/rSx1rroMgE1qbmiAWcxM7vJ9vyr/
9H9a0RtWK8HipRzqm3QR5S2Jc/+CVSeMZejXszhSA+NpCDvY5a0BBNGgujGBMXkN
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12733303006749516626560928910521708460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal2.zto-stg.docomo.ne.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22725325650230980790687545819515482449241434176069557993507359697735430235317877413438384311826748818287727353088236661300997619398000014042910244080012044569257542038293718866660092917212232521858277542713360430380869794913114836097139971173484240648703191489159504009348221621047034725422128547245263529541183506028351802973442352570385388898544177907376681394640604932170287875136076053813062452577677056161265122429667564798486688608708466179043995739023282920279330166154195423360251838793946667128207473673177732974750905725177051968749036013972058512296691634130022777977103086936827429684326311369928796081491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0a127a847227ce7c3261754279b56bdcaf51158
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal2.zto-stg.docomo.ne.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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