sp.arena.emtg.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 08:3c:af:dc:5f:fe:02:11:6b:8e:a9:2d:e2:a5:b3:92 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sp.arena.emtg.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:3c:af:dc:5f:fe:02:11:6b:8e:a9:2d:e2:a5:b3:92
Serial Number (int): 10948928659375961678708577965514797970
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a5:a0:ba:32:95:1f:d0:be:5e:72:57:f8:6b:29:47:56:92:1c:02:08
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 93:38:2c:ee:57:b7:69:79:1e:31:0b:8c:9e:36:d4:62:e4:ba:53:bc
Fingerprint (sha256): 09:cf:87:14:95:2e:0f:38:35:8f:e3:07:71:a0:7f:13:20:5e:23:25:d9:9d:44:37:45:5b:37:f0:3b:34:da:be

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate sp.arena.emtg.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sp.arena.emtg.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sp.arena.emtg.jp

Other certificates including the domain name emtg.jp

(limited to 100 certificates)
fcticket.emtg.jp
imgc.emtg.jp
dev-kimaguren.emtg.jp
secure.emtg.jp
store.emtg.jp
test-sp.e-yazawa.emtg.jp
collection.emtg.jp
stg-secure.emtg.jp
*.imgc.emtg.jp
store.emtg.jp
cc-jpbl.emtg.jp
sp.arena.emtg.jp
emtg.jp
test-sp.arena.emtg.jp
test-sp.e-yazawa.emtg.jp
*.hawks.emtg.jp
stg-teamkobukuro.emtg.jp
trade.emtg.jp
sp.arena.emtg.jp
store.emtg.jp
goodf.emtg.jp
faq.emtg.jp
secure.emtg.jp
register.emtg.jp
*.arena.emtg.jp
stg-teamkobukuro.emtg.jp
emtg.jp
sp.arena.emtg.jp
dev-ssl.emtg.jp
api-tguard.emtg.jp
stg-teamkobukuro.emtg.jp
emtg.jp
emtg.jp
*.store.emtg.jp
ticket-trade.emtg.jp
emtg.jp
secure.emtg.jp
sp.arena.emtg.jp
*.premium.emtg.jp
*.sns.emtg.jp
api-tguard.emtg.jp
stg-sns.emtg.jp
stg-tguard.emtg.jp
image.emtg.jp
dev-secure.emtg.jp
test-sp3m.e-yazawa.emtg.jp
register.emtg.jp
collection.emtg.jp
api-tguard.emtg.jp
collection.emtg.jp
sns.emtg.jp
*.hawks.emtg.jp
dev-secure2.emtg.jp
stg-classkobukuro.emtg.jp
dev-secure.emtg.jp
dev-secure.emtg.jp
emtg.jp
emtg.jp
image.emtg.jp
fcticket.emtg.jp
stg-tguard.emtg.jp
artist-mailbox.emtg.jp
sp.arena.emtg.jp
fcticket.emtg.jp
test-sp.arena.emtg.jp
stg-sns.emtg.jp
*.emtg.jp
secure.emtg.jp
test-sp3m.e-yazawa.emtg.jp
cc-giants.emtg.jp
trade.emtg.jp
emtg.jp
stg-tguard.emtg.jp
emtg.jp
fcticket.emtg.jp
cc-hnf.emtg.jp
sp.arena.emtg.jp
stg-tguard.emtg.jp
register.emtg.jp
dev-secure.emtg.jp
img.emtg.jp
kobukuro.emtg.jp
image.emtg.jp
cc-jpbl.emtg.jp
*.emtg.jp
stg-secure.emtg.jp
img.music.emtg.jp
sp.arena.emtg.jp
stg-teamkobukuro.emtg.jp
image.emtg.jp
emtg.jp
stg-classkobukuro.emtg.jp
stg-secure.emtg.jp
dev-paycenter.emtg.jp
goodf.emtg.jp
secure.emtg.jp
stg-classkobukuro.emtg.jp
secure.emtg.jp
emtg.jp
*.admin.emtg.jp

Certificate

The complete raw certificate details for sp.arena.emtg.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUlWcojHVkU2fq/4V5+Z
su3UmOwvX7vBLjyUVnKyw+PmCwdqcizBbe85HOjAHOPF9/xIOsPLIlKKdUzqzsDU
pXhUCjZLMNLobc540cOUVR9UEUsU+fXBcMhXUYb0vn9/Ce5HNTpDx/DOdz76WkQF
mdDXv29lAzZRwSWA5ZPctUI/md1ngkY9wS9DnRFAb2zq2eHtAvWrLqz19DsHZJMp
OoMZBeZIDO2KPrUuQ1nxBmMiO4jLbgenZV0RB1ZP5SFyiYypdQNEviQujOvugH/v
F+GDDpSxoVyIf6Hr5OZJv8+R52UN65KczzLGc8xHy46iwPrSB87BaouCsa6p2ncI
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10948928659375961678708577965514797970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sp.arena.emtg.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22885297359263058882576728986460865006623008623252587682400001415278430740887735290138188399165735425263923611034438004614041109633592913838642600463540874803489560107512033325964856993479216678335557533637293624275802392815717793160311012441434715021289103208095134972507618255245687062369552976976863761230288965220242416686247246980141710959608593864510856052245782470342670644295563457047308347504691482135372188617334124886306057458265106656466100626162744828205689451202625114122302435892383942136931669627877986106865650884638986425908353941640455977181192736840935806192943405149060992034234505510348352063711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5a0ba32951fd0be5e7257f86b294756921c0208
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.arena.emtg.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001704642002d000004030047304502210088ffc1f242ba43ae30dd6852bf3aa522d8a9b71c39f8eb1220a91bb496d2f5eb02205dd0b47413e8cf2e46c35218cf2ce6e7d747b1ee3d8e22a2f810d2e10eb62c3f0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000170464200750000040300483046022100c3a7e1c353ddfd87d8f2ce1fc7c5e73e64d98220941de126881e9036463dd126022100b692abfb9376246f241a6ad3762c2c81cf2aded0930dde62242222e744d9f893
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00767ef22fa3cfd97c4f0e6e5392d82ab2f297915bc6682d826520ef090d6738aa5ee25fc10204e6c29d312598d58121453c86afd7f2630835c1e35d95a4ee477b7ecc818323b699a90a7a802e807b44f8a583aee1b77c984766d7c32b6f98d7b8246bb1eef7749965a25cafdbd732ec58eb2d07184c900a37de6065606952611ab43c47888eeb4798814c729b3d539e7824dd76064e7763913976b2d373f43d2be2169cf74601005d22791dc6d8a65344fdb5b0ed04272b5276f3f6280bbb04501300345ad5ba61197093120ffe01e7be3be4371944b200acec491bad0591c8c972c52f799900c183e894744667f2eb8963ff4dfe73b23c0b4f60f052272fe952