ip.pbl.auone.jp

- KDDI CORPORATION -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 57:60:92:b2:e4:41:e0:ee:d8:df:4f:63 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

KDDI CORPORATION

Organization: KDDI CORPORATION
Organization unit: System Management Department
State / Province: Tokyo
Locality: Chiyoda-ku
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 57:60:92:b2:e4:41:e0:ee:d8:df:4f:63
Serial Number (int): 27041945498614644098908245859
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a3:94:b2:ed:9c:8d:89:5d:84:69:05:99:73:22:cd:3c:d0:f9:50:21
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 27:6e:53:68:12:5e:f4:fc:ac:06:90:5f:53:06:0f:57:6b:64:27:4d
Fingerprint (sha256): 04:fd:eb:ef:1c:79:84:4d:ca:f4:81:6d:24:87:98:7b:69:e3:78:6b:de:ac:43:3f:e2:75:e7:42:a1:94:4d:63

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate ip.pbl.auone.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ip.pbl.auone.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ip.pbl.auone.jp

Other certificates including the domain name auone.jp

(limited to 100 certificates)
adc.auone.jp
test.ap.connect.auone.jp
test3.id.auone.jp
cc2.connect.auone.jp
admin.enjoy.point.auone.jp
scr.cs1.auone.jp
stg.toto.auone.jp
*.osusume.auone.jp
www.maestro.io
*.stg.pass.auone.jp
jas.fn.auone.jp
spcamp.auone.jp
point.ideco.auone.jp
front.new.api.support.pass.auone.jp
support5.cdnetworks.net
test.rec-cloud.auone.jp
support5.cdnetworks.net
apl.opo.auone.jp
support12.cdnetworks.net
jpssl.cdngc.net
support12.cdnetworks.net
jpssl.cdngc.net
cs.auone.jp
support12.cdnetworks.net
shop.wm.auone.jp
connect.auone.jp
app2.wallet.auone.jp
akamai-san20.exacttarget.com
dev.hl.auone.jp
cc2.ip.connect.auone.jp
support5.cdnetworks.net
dev.exchange.point.auone.jp
utapre.auone.jp
stg.portal.game.habits.auone.jp
support5.cdnetworks.net
anshinnaviapp.xx.auone.jp
game.auone.jp
support12.cdnetworks.net
point.ideco.auone.jp
support12.cdnetworks.net
*.game.auone.jp
support5.cdnetworks.net
star-00.auone.jp
s.auone.jp
support12.cdnetworks.net
djlrecommend.auone.jp
api.games.stg.pass.auone.jp
mcmc.k3.engage.auone.jp
support12.cdnetworks.net
api.game.auone.jp
support5.cdnetworks.net
wm.auone.jp
*.search.auone.jp
wallet-inv-origin.auone.jp
au-cloud-api.auone.jp
sphi.auone.jp
ad.au-cloud-api.auone.jp
stg-point.ideco.auone.jp
stgaddress.kenshou.auone.jp
sec.auone.jp
www.maestro.io
sp-st.news.search.auone.jp
api.stg.info.wallet.auone.jp
tokuten.auone.jp
san-10-s11.tlsprovisioning.exacttarget.com
www.maestro.io
wl.auone.jp
au-photo.auone.jp
*.tokuten.auone.jp
faq.autravel.auone.jp
test.att-cloud.auone.jp
www.maestro.io
friendsnote2.kenshou.auone.jp
stg.resource.widget.auone.jp
reg.okozukai.auone.jp
temp.connect.auone.jp
touchtest.eznavi.auone.jp
auok.auone.jp
support12.cdnetworks.net
pushinfo.wallet.auone.jp
promotion.auone.jp
tokuten.auone.jp
*.auone.jp
ez.star.auone.jp
support5.cdnetworks.net
kantan-cpn.auone.jp
campaign.auone.jp
v-account.mobile.auone.jp
test.front.agent.api.support.pass.auone.jp
live.k1.engage.auone.jp
jpssl.cdngc.net
ideco.auone.jp
jpssl.cdngc.net
stg.game.auone.jp
www.maestro.io
test.wallet.auone.jp
ip.pbl.auone.jp
st.oa.connect.auone.jp
v-account.mobile.auone.jp
auok.auone.jp

Certificate

The complete raw certificate details for ip.pbl.auone.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCCimPLRSJBys5OU1Ms9
gymRSnJJnzi3crTxWQdgLAsgFxQGlVl8qKA2cZR51/Un8vh2cSLYtz17888gurWX
ROjDezzdq/QFe6NZkOJapOz/YbwAXClqQGPFImQjXGTiJCIRgRogQplz8urcj1Yp
uz1DfKVj3qASCyNfwGMS2zbEr1GB0bm4o/NuIdOSLzH/8T7oAKbhfOWwkgAIDgSW
ri5fKLPEeCw2YDyvfxrC0t5P8ybNHlvdAV8M07sEX2T+rmGJOENARljHOCChXyRe
6nokbCCqaiFXZwG8rMrGvXPT+uMbPSVYgFABRKSHN78BpJJWZU1BAfIt0ULO0o0Y
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27041945498614644098908245859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 07:07:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-17 07:07:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'System Management Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KDDI CORPORATION'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ip.pbl.auone.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20214221785008309692189833690439102053824126553607734475556009356416072620320466506243969101733882313570960297750981560340835680814435611310431027300351518976000446645122104530208352480048302207892325394863963569820350985399901793609916571300262482798486778009903236343077074310890277867543959812716455872048332060622473515598710436403254888076800436533826716384348004002825949974460584766162176968551461350744636137754229164315199673560087054223203515970196012908701466453624897916715748658928815656659018983134914384019967386697272325973774069801398150798466401475298516794182257346876466039206720294966079100098761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip.pbl.auone.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a394b2ed9c8d895d846905997322cd3cd0f95021
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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