www.kyoto-mensclinic.jp

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f3:29:16:29:69:f9:04:c9:07:96:b3:7d:ae:05:45:a1:78 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kyoto-mensclinic.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:29:16:29:69:f9:04:c9:07:96:b3:7d:ae:05:45:a1:78
Serial Number (int): 344080086375401674244669297510324527014264
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:94:c6:7a:da:61:b1:dd:e8:00:dd:8a:d3:0b:19:3e:38:e2:ca:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ac:0d:82:3d:62:eb:7d:88:44:23:6a:20:0a:94:65:7b:0d:9d:76:0c
Fingerprint (sha256): 04:2f:20:aa:e8:e5:28:ac:83:9a:30:c9:bd:98:92:1d:b1:5d:76:8c:a8:f1:62:f3:9c:3f:9a:4d:be:6d:38:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kyoto-mensclinic.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kyoto-mensclinic.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kyoto-mensclinic.jp
www.kyoto-mensclinic.jp

Other certificates including the domain name kyoto-mensclinic.jp

(limited to 100 certificates)
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp

Certificate

The complete raw certificate details for www.kyoto-mensclinic.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqvaeX60tHMFveroMf2S
DHI8QGXrwXaXtJ1TfNUGo1tXDjnDksl8rvlhdIgoGurj43wNCgYTyhoUjUVD2rLM
ADYHBF1A2aak7TQAS5AjeZ6A0xZ6VaHN8jgC2k7+CJfxJ0sAfIOhIki6AXq+O4cW
OsZqio7aQnir3p/LTv6kgcTjQ2ALeuFcEbeeYduyX+o5xlQAjyJ/KPRphY1RL7mS
CbeJMwoHqx56dnQeWPamcJyGh3T20DzXpN7Jj9k3dXc5lSwcNKHMppr1/3DYv15v
cNbsz5I2KUQfwarq6NQkcxjnmQEJmfLeZAEUaAMokKAI7gRrzP2IQ1Zqhr5nw1VW
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344080086375401674244669297510324527014264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 19:05:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-09 19:05:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kyoto-mensclinic.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23060115581887656596680218758162910322112302072714472138367953446521756057879388948400700657838297513349952080833414824557583619759559083252677722484553608629781019883392911238755335015328222696718788297509277565686742551023482121383191509796177985970435585949703116104539714072242999415621767928226426826879780308485422511744592296384655875208005402693384129518974903401695696645863355267364168118535138218198633566445111363903406477943456141403890935630041939015189735655291561701166453712185959858770037027755125643107915921239253096722677775126751404486364173054663112000393576941096495029940984265627187648222771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e194c67ada61b1dde800dd8ad30b193e38e2ca53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyoto-mensclinic.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kyoto-mensclinic.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001696e5c1da8000004030047304502203589e2b25e1db1539ead1737d0936809ab3710611de9358c5e784c58665ef2c2022100c74304147467a28e5920627f7331e5a1499ff9ecdeda3de30260811dd0122076007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001696e5c1f5f000004030046304402203e38a0b133022755b4d87ef9ab4ace1631eaa60ef258ac42d838b88d489dff8f022055782e507c6f3f4f8054f6b299716ee75c36e4a84562535b06810d24029f05f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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