x279.secure.ne.jp

- KDDI Web Communications Inc. -

Issued by Servision Certification Authority

About this certificate

This digital certificate with serial number 41:70:90:ed:59:73:2b:ff was issued on by Servision Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

KDDI Web Communications Inc.

Organization: KDDI Web Communications Inc.
State / Province: Hosting Service
Locality: Instant CPI SSL
Country: JP

Servision Inc.

Organization: Servision Inc.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 41:70:90:ed:59:73:2b:ff
Serial Number (int): 4715428158939278335
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 30:e1:88:d3:a6:a2:1f:b6:30:e2:6f:ff:e4:19:82:e9:05:15:af:df
AuthorityKeyId: 04:35:f9:47:b1:ee:2b:a2:55:09:ae:30:5b:b7:90:ca:ac:57:5d:c7

Fingerprint (sha1): be:74:36:e9:5c:49:46:83:b9:2d:6f:9f:0d:98:d5:ce:3c:a6:bf:9a
Fingerprint (sha256): 05:80:0a:c2:48:00:1f:35:b7:72:d8:17:a5:9a:6e:8c:3d:1d:38:a6:c2:23:5b:5d:a4:8e:e2:fd:e9:9c:f3:72


Revocation information

CRL Distribution Point: http://repo1.secomtrust.net/sppca/servision/fullCRL.crl

Check the revocation status for certificate x279.secure.ne.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for x279.secure.ne.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

x279.secure.ne.jp

Other certificates including the domain name secure.ne.jp

(limited to 100 certificates)
x173.secure.ne.jp
s190.secure.ne.jp
s127.secure.ne.jp
x347.secure.ne.jp
xb202.secure.ne.jp
x480.secure.ne.jp
staging.sr.secure.ne.jp
xb301.secure.ne.jp
x346.secure.ne.jp
m209.secure.ne.jp
x130.secure.ne.jp
g302.secure.ne.jp
xa124.secure.ne.jp
z106.secure.ne.jp
xa131.secure.ne.jp
x346.secure.ne.jp
x266.secure.ne.jp
s118.secure.ne.jp
aa222.secure.ne.jp
m211.secure.ne.jp
s208.secure.ne.jp
s402.secure.ne.jp
gt201.secure.ne.jp
s102001.secure.ne.jp
s301.secure.ne.jp
z143.secure.ne.jp
cvps-158-199-195-137.secure.ne.jp
s138.secure.ne.jp
s125.secure.ne.jp
gt161.secure.ne.jp
g630.secure.ne.jp
x156.secure.ne.jp
xb102.secure.ne.jp
xa130.secure.ne.jp
g640.secure.ne.jp
aa107.secure.ne.jp
m204.secure.ne.jp
x601.secure.ne.jp
x176.secure.ne.jp
m128.secure.ne.jp
z203.secure.ne.jp
x180.secure.ne.jp
s105.secure.ne.jp
gt161.secure.ne.jp
chm11ztest.secure.ne.jp
aa118.secure.ne.jp
gt401.secure.ne.jp
s129.secure.ne.jp
xa109.secure.ne.jp
s204.secure.ne.jp
xa113.secure.ne.jp
g108.secure.ne.jp
s128.secure.ne.jp
x190.secure.ne.jp
m123.secure.ne.jp
xa113.secure.ne.jp
xb106.secure.ne.jp
gt106.secure.ne.jp
s120.secure.ne.jp
x106.secure.ne.jp
zz131.secure.ne.jp
x441.secure.ne.jp
z301.secure.ne.jp
xa132.secure.ne.jp
x270.secure.ne.jp
xa120.secure.ne.jp
s302.secure.ne.jp
xb116.secure.ne.jp
xb203.secure.ne.jp
g402.secure.ne.jp
s126.secure.ne.jp
gt302.secure.ne.jp
gt109.secure.ne.jp
aa194.secure.ne.jp
x150.secure.ne.jp
aa156.secure.ne.jp
*.secure.ne.jp
x279.secure.ne.jp
gt503.secure.ne.jp
xa138.secure.ne.jp
information.secure.ne.jp
g643.secure.ne.jp
s109.secure.ne.jp
s121.secure.ne.jp
gt401.secure.ne.jp
x250.secure.ne.jp
x274.secure.ne.jp
x173.secure.ne.jp
x280.secure.ne.jp
z141.secure.ne.jp
z303.secure.ne.jp
m117.secure.ne.jp
g636.secure.ne.jp
gt161.secure.ne.jp
s108.secure.ne.jp
xa112.secure.ne.jp
m139.secure.ne.jp
g109.secure.ne.jp
g303.secure.ne.jp
s106.secure.ne.jp

Certificate

The complete raw certificate details for x279.secure.ne.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy1+B9G0JRkmLtU0sFLV
EbeY79NVthQEhaB1bwimo8hQetKKqlO1d/LQUYhb5rlM+bCbPNzIpRCqCb+HXazr
CSUalsP3yP1MSV68ZysT5mD9EjHLbkehpN1AcAawwmvfAYrikaYAGJ93bQoZd9lZ
sf5zcN/DYghEzsmcx8lxF4l64OiIFo3BTduIeztYTBq4nfw2a2VehK/0E3XEaPYo
84HBLcPlEyyLPgUcLYjtQY7vBd2eTEIJoyHMCtIzhL9p9ynvLshfOUrK1OuHWLqu
4qbjmoCnlwlJqCUfL9NjwWLWAaLjihHhgrtugoYsURNTUDvME2DpT3cYd43bh0lx
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4715428158939278335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Servision Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Servision Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-24 01:34:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-06 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Instant CPI SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KDDI Web Communications Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'x279.secure.ne.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26153762220555369200226435032535045365092505368108896699336997559197963055775581561353960250721465584304767260206638359409335266902441039351901042080505488085524008395531121520382681669481859815775429783884692629631678745310597915866613756254083299933499952396803002938210520871261269249998627017747039573224316998142353066285747659358684550190088516264400650733990393694866945972518740900148703522847134026871522626476809533052852378723662353676130561418315055601085625459643915336981999962581341971714455226894201438344988735066015450814761804831683124474119642107425793608066817802475974117786129426906763953271131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30e188d3a6a21fb630e26fffe41982e90515afdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0435f947b1ee2ba25509ae305bb790caac575dc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x279.secure.ne.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.141.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/servision/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/servision/fullCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							0640
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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