san1caang.testcaasub1.ctjssl.jp

- Cybertrust Japan Co.Ltd. -

Issued by Cybertrust Japan Public CA G3

About this certificate

This digital certificate with serial number 1c:c8:d3:24:dd:e1:92:f2:85:3e:78:2e:a6:86:8f:a6:5a:c9:cd:ce was issued on by Cybertrust Japan Co., Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cybertrust Japan Co.Ltd.

Organization: Cybertrust Japan Co.Ltd.
State / Province: Tokyo
Locality: Minato-ku
Country: JP

Cybertrust Japan Co., Ltd.

Organization: Cybertrust Japan Co., Ltd.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:c8:d3:24:dd:e1:92:f2:85:3e:78:2e:a6:86:8f:a6:5a:c9:cd:ce
Serial Number (int): 164330283860201076180553527532748954542902201806
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: df:b3:0d:02:02:db:c2:01:e3:a0:f0:64:44:47:66:38:6b:69:13:f1
AuthorityKeyId: 73:a8:08:53:29:b8:15:fb:99:80:e5:c5:37:d8:f8:39:7b:a4:13:06

Fingerprint (sha1): 5b:f3:f0:c0:03:c8:d6:67:3a:c8:f6:e3:44:b1:1a:00:66:64:d7:0f
Fingerprint (sha256): 07:7c:21:62:1c:9d:ea:f4:8c:7a:1a:af:42:b5:46:9f:11:38:40:98:1a:46:2a:db:46:9b:75:e7:75:8b:31:2d

Issuing Certificate URL: http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/ctjpubcag3_sha256.crt

Revocation information

OCSP Server: http://ocsp.cybertrust.ne.jp/OcspServer
CRL Distribution Point: http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/cdp.crl

Check the revocation status for certificate san1caang.testcaasub1.ctjssl.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san1caang.testcaasub1.ctjssl.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san1caang.testcaasub1.ctjssl.jp
san2caang.testcaasub1.ctjssl.jp

Other certificates including the domain name ctjssl.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for san1caang.testcaasub1.ctjssl.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19pgVO4go8YBI5jlef86
fjUTzBES5+V2zMqT98kimSDsVdE4Mx3zG5PBE3+OX+uNAK+lq4RNB8znDHnAYR+d
sw12/ItIFenESFRzeCUF6Btsnk0T9QMIHcy7sOlqAyec5q6vxZxqFbeYnhfJL4gj
3RkPQhkjco611ENH0ktvH01t3GLb0ZuZzBMeHBYxZqY0SoF66RlMqW0PQqeW9lpX
LCZsvZdX7/d9eaA0gnhuIwp5bOh6CukcoJTqJzrIEoDuycGf36r+F7124jZTdj5F
W38uewNGuMuGp3GNr+tU3Cw4bpPDB6xlO6Al0BmR2OzilbUdUC0MlKLvbqtDUxDw
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 164330283860201076180553527532748954542902201806
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan Public CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-02 03:03:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-30 14:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minato-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan Co.Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san1caang.testcaasub1.ctjssl.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27248920932715084639227575100024399808111573938996984474600588694756453436874982314283232553785112748173167230550882400171735199265728803095413012276470773357078057497581922620050815363677496612222004057509263575948003247436951949388914698436660700983162254586440335308667426888386258949976743407678349583421934043535010015705815038071067543835880032978081958027207757725138722853711534565339087548320974433302932163811946369641119675987321256334458345393399701072389453659006142746931229567065032561831728402385822766162120114438441090343383250507508243971091416158718100053270311306368972102663412456564091713024187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200081.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.cybertrust.ne.jp/ssl/repository/index.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1caang.testcaasub1.ctjssl.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san2caang.testcaasub1.ctjssl.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.cybertrust.ne.jp/OcspServer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/ctjpubcag3_sha256.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 73a8085329b815fb9980e5c537d8f8397ba41306
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/cdp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dfb30d0202dbc201e3a0f064444766386b6913f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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