*.securesite.ne.jp

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5f:ba:b0:21:e9:e0:7e:f1:12:9d:3a:2d was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.securesite.ne.jp,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:ba:b0:21:e9:e0:7e:f1:12:9d:3a:2d
Serial Number (int): 29626767897572251424807270957
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e1:9a:b5:aa:f8:e0:da:ed:b9:ab:c9:4d:79:32:1b:35:2f:b9:37:04
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 0d:da:9e:3d:5f:95:30:40:ac:eb:04:bb:55:57:cd:22:7b:e2:13:c1
Fingerprint (sha256): 09:07:b7:7a:5b:48:51:ff:09:40:6e:30:db:82:55:b9:bc:d5:97:eb:5b:90:95:de:6e:50:3e:a6:b1:7d:34:75

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.securesite.ne.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.securesite.ne.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.securesite.ne.jp
securesite.ne.jp

Other certificates including the domain name securesite.ne.jp

(limited to 100 certificates)
ss012.securesite.ne.jp
vs011.securesite.ne.jp
ds014.securesite.ne.jp
bs008.securesite.ne.jp
sd33.securesite.ne.jp
vs017.securesite.ne.jp
ds030.securesite.ne.jp
vs025.securesite.ne.jp
bs003.securesite.ne.jp
vs025.securesite.ne.jp
*.securesite.ne.jp
sd13.securesite.ne.jp
ds005.securesite.ne.jp
ss023.securesite.ne.jp
sd33.securesite.ne.jp
vs025.securesite.ne.jp
sd07.securesite.ne.jp
ds021.securesite.ne.jp
ds014.securesite.ne.jp
ss023.securesite.ne.jp
dv018.securesite.ne.jp
ss019.securesite.ne.jp
vs013.securesite.ne.jp
ds030.securesite.ne.jp
dv004.securesite.ne.jp
vs013.securesite.ne.jp
sd18.securesite.ne.jp
bs003.securesite.ne.jp
dv004.securesite.ne.jp
sd50.securesite.ne.jp
sd33.securesite.ne.jp
vs017.securesite.ne.jp
dv018.securesite.ne.jp
vs011.securesite.ne.jp
ss019.securesite.ne.jp
vs013.securesite.ne.jp
bs008.securesite.ne.jp
ssl.securesite.ne.jp
ss012.securesite.ne.jp
vs020.securesite.ne.jp
ss012.securesite.ne.jp
dv024.securesite.ne.jp
dv004.securesite.ne.jp
*.securesite.ne.jp
sd24.securesite.ne.jp
dv009.securesite.ne.jp
dv024.securesite.ne.jp
sd33.securesite.ne.jp
dv018.securesite.ne.jp
vs011.securesite.ne.jp
vs011.securesite.ne.jp
ss007.securesite.ne.jp
vs025.securesite.ne.jp
sd50.securesite.ne.jp
dv004.securesite.ne.jp
ds005.securesite.ne.jp
vs013.securesite.ne.jp
ss012.securesite.ne.jp
ss002.securesite.ne.jp
sd13.securesite.ne.jp
dv024.securesite.ne.jp
ss002.securesite.ne.jp
bs010.securesite.ne.jp
ssl.securesite.ne.jp
ds005.securesite.ne.jp
vs006.securesite.ne.jp
ssl.securesite.ne.jp
vs011.securesite.ne.jp
sd24.securesite.ne.jp
vs026.securesite.ne.jp
dv024.securesite.ne.jp
ss023.securesite.ne.jp
vs001.securesite.ne.jp
vs011.securesite.ne.jp
ss012.securesite.ne.jp
www.ss019.securesite.ne.jp
dv009.securesite.ne.jp
bs008.securesite.ne.jp
ss007.securesite.ne.jp
ss023.securesite.ne.jp
dv024.securesite.ne.jp
ds021.securesite.ne.jp
ssl.securesite.ne.jp
sd07.securesite.ne.jp
dv018.securesite.ne.jp
ss019.securesite.ne.jp
vs013.securesite.ne.jp
vs013.securesite.ne.jp
bs010.securesite.ne.jp
ssl.securesite.ne.jp
sd18.securesite.ne.jp
ss002.securesite.ne.jp
ss007.securesite.ne.jp
ds005.securesite.ne.jp
ds005.securesite.ne.jp
dv024.securesite.ne.jp
dv009.securesite.ne.jp
ds014.securesite.ne.jp
ds014.securesite.ne.jp
ss019.securesite.ne.jp

Certificate

The complete raw certificate details for *.securesite.ne.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmFyL6BvBr6orvQ7g+p8
UatFl1V/woYoejPEFvvQNG5dp+ZhzNZ7YnLlw8qlw2JoEkdmcdG+uzxTxyiV7JiC
onRBELSkbGDrXrcwP6dPZIUHcx5AXtwCzsiNFREIjU02beYjxVBo95HoZjttdqPy
3JsgsCkbLHkllBEgO7IdRu2WR0vxm7oogXr7cneaFlM1A7R16xjk2FoaDCxoG7W4
Nb71SlzqrsZBExtKK3goakNrZhMdKRbmUyBcHO1iYsNbKwtIsOD+wVK+kecIJuZQ
tDLNyQdcKltsp5r7VsgCKGN4d4ac76cX5HHywjwSN7InzzcSLRopfyM3yRlyhzVH
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29626767897572251424807270957
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-20 07:52:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 07:52:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.securesite.ne.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26053143255888958342826995590978730884714008016225562238426333493889532833467238529709006236287606783241888666617856199700881541765743399854469395820701905352068122151587052314759811045951017274852434072397292591937057056131968225125204723438058889175263370117833712850043191198628976760302059002879610798453923654731102556152641392031588463241497566028381319929263050177901883239870715701319108815057104567229918674714748280299327784211603335672174144750853405297429209820084230383635836026355999960868780287303389149971311371704516779580593051264268310001067449977477142005721552402336805861520534751120249425577981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securesite.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.ne.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e19ab5aaf8e0daedb9abc94d79321b352fb93704
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016556521d1c000004030047304502206e0f672db34f2262a35b324ea0cabc5d8aafd1f85283cdcc8869945098b178fc022100afded3e1c3c7e8ad725d03d0377d916230524dfe77b1615c4a4da754e4f20daa007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016556521ead0000040300463044022037e2fd94c812b370c4ea245febf3df3a7e035f6317dacae1b892460f7469fcef02206c9b8535b583e1474bb0abef94597b119aa11b3f7d1c621f9d0d9735a18f8921
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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