au-photo.auone.jp

- KDDI CORPORATION -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:88:aa:2b:dd:22:66:32:53:e0:8d:cc:fd:1e:d0:d4:7a was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

KDDI CORPORATION

Organization: KDDI CORPORATION
Organization unit: Content Business Department
State / Province: Tokyo
Locality: Chiyoda-ku
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:88:aa:2b:dd:22:66:32:53:e0:8d:cc:fd:1e:d0:d4:7a
Serial Number (int): 1492319837535871544677416779511319063745658
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 0a:cb:2a:9f:80:09:c1:2c:98:92:07:9a:a5:82:e5:84:bf:b7:9d:c9
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): e8:a6:02:94:9e:85:ac:9f:8f:1a:28:ab:ed:c9:10:b2:c1:a3:de:9a
Fingerprint (sha256): 03:3b:fa:c4:29:63:e8:7b:c3:1e:f7:eb:45:1b:33:21:d2:22:5f:8a:f3:e5:b2:5d:dd:31:8f:0c:bc:ed:cd:dd

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate au-photo.auone.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for au-photo.auone.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

au-photo.auone.jp

Other certificates including the domain name auone.jp

(limited to 100 certificates)
adc.auone.jp
test.ap.connect.auone.jp
test3.id.auone.jp
cc2.connect.auone.jp
admin.enjoy.point.auone.jp
scr.cs1.auone.jp
stg.toto.auone.jp
*.osusume.auone.jp
www.maestro.io
*.stg.pass.auone.jp
jas.fn.auone.jp
spcamp.auone.jp
point.ideco.auone.jp
front.new.api.support.pass.auone.jp
support5.cdnetworks.net
test.rec-cloud.auone.jp
support5.cdnetworks.net
apl.opo.auone.jp
support12.cdnetworks.net
jpssl.cdngc.net
support12.cdnetworks.net
jpssl.cdngc.net
cs.auone.jp
support12.cdnetworks.net
shop.wm.auone.jp
connect.auone.jp
app2.wallet.auone.jp
akamai-san20.exacttarget.com
dev.hl.auone.jp
cc2.ip.connect.auone.jp
support5.cdnetworks.net
dev.exchange.point.auone.jp
utapre.auone.jp
stg.portal.game.habits.auone.jp
support5.cdnetworks.net
anshinnaviapp.xx.auone.jp
game.auone.jp
support12.cdnetworks.net
point.ideco.auone.jp
support12.cdnetworks.net
*.game.auone.jp
support5.cdnetworks.net
star-00.auone.jp
s.auone.jp
support12.cdnetworks.net
djlrecommend.auone.jp
api.games.stg.pass.auone.jp
mcmc.k3.engage.auone.jp
support12.cdnetworks.net
api.game.auone.jp
support5.cdnetworks.net
wm.auone.jp
*.search.auone.jp
wallet-inv-origin.auone.jp
au-cloud-api.auone.jp
sphi.auone.jp
ad.au-cloud-api.auone.jp
stg-point.ideco.auone.jp
stgaddress.kenshou.auone.jp
sec.auone.jp
www.maestro.io
sp-st.news.search.auone.jp
api.stg.info.wallet.auone.jp
tokuten.auone.jp
san-10-s11.tlsprovisioning.exacttarget.com
www.maestro.io
wl.auone.jp
au-photo.auone.jp
*.tokuten.auone.jp
faq.autravel.auone.jp
test.att-cloud.auone.jp
www.maestro.io
friendsnote2.kenshou.auone.jp
stg.resource.widget.auone.jp
reg.okozukai.auone.jp
temp.connect.auone.jp
touchtest.eznavi.auone.jp
auok.auone.jp
support12.cdnetworks.net
pushinfo.wallet.auone.jp
promotion.auone.jp
tokuten.auone.jp
*.auone.jp
ez.star.auone.jp
support5.cdnetworks.net
kantan-cpn.auone.jp
campaign.auone.jp
v-account.mobile.auone.jp
test.front.agent.api.support.pass.auone.jp
live.k1.engage.auone.jp
jpssl.cdngc.net
ideco.auone.jp
jpssl.cdngc.net
stg.game.auone.jp
www.maestro.io
test.wallet.auone.jp
ip.pbl.auone.jp
st.oa.connect.auone.jp
v-account.mobile.auone.jp
auok.auone.jp

Certificate

The complete raw certificate details for au-photo.auone.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Xs5JABIeYowyALcdMQh
iLl8BTNj8mcFHdhJA+chtKeTzKjPh3wRu0yf/vjaux0xiV3XxqcmC2tvpdEgze/O
SjDDn0yYxwPpHX9YGBIN0NFXVgQI04mA//cFjPR13qGMkKt8VQgIGx3Ug9OPSo5s
FbYIJ7xjZ+06LzsKMBcrgYd2r+My6QmyEaOMxWOjfSxNt7UfyvV70UN1EGM56oOe
VjXM7JeEL+8QVb+3sPAUj9s4axB2VzSAykYkBs/FyFHAaR4DT8hRgWS1pc6DMU0A
Urq3CD00+ONFZTqKj9eRzoQX8AgzYPZPoZS2ZQsu3nFaSkwibJzbBrZy89Bbhd/F
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492319837535871544677416779511319063745658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-14 08:47:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-01 07:53:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chiyoda-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Content Business Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KDDI CORPORATION'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'au-photo.auone.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29474288684456180525384256477137884411286670294662574272344799999317191300686362136304321813528320675554365923334972004246127388927710900658215275161982477550735275052247330863231588556495782014202870645059142476048125135704303711426418738549523235561661171829065962338260728591346307970815794712795445991104483971759444946454743446344717433527872593959823534483981375028910146655590923719354867076350572907041267513708183717454968620280988973731864762683765257260650899213093346926405462023378910162210446430076434748254150195549721913641711003510463492274516231187689140556314589969014531769282853537809792663274791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au-photo.auone.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0acb2a9f8009c12c9892079aa582e584bfb79dc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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