sanrio.co.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:6e:f7:fd:a4:db:86:a8:61:30:bb:de:b9:b3:77:07 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sanrio.co.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:6e:f7:fd:a4:db:86:a8:61:30:bb:de:b9:b3:77:07
Serial Number (int): 19185374446345803599624987539447969543
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 68:ec:0d:88:58:ce:ff:8c:e3:f1:fa:24:b4:76:eb:97:85:61:a0:98
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e6:3b:7a:3f:e5:aa:b8:e6:2c:fb:8c:0e:1e:0b:96:73:dc:08:2b:f1
Fingerprint (sha256): 0a:f2:b0:9f:7a:4f:e9:63:9a:8a:fe:7e:f9:8b:e7:a4:c6:16:9d:e0:88:ad:a3:e5:31:42:fb:fd:0e:bc:b2:64

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate sanrio.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanrio.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanrio.co.jp
*.sanrio.co.jp

Other certificates including the domain name sanrio.co.jp

(limited to 100 certificates)
pages.friends.sanrio.co.jp
akamai-san10.exacttarget.com
ec-stg.sanrio.co.jp
akamai-san10.exacttarget.com
akamai-san10.exacttarget.com
www.sanrio.co.jp
akamai-san10.exacttarget.com
shared-certificate.user-space.cdn.idcfcloud.net
locations.corelifeeatery.com
sanrio.co.jp
akamai-san10.exacttarget.com
www.sanrio.co.jp
oma-ia.sanrio.co.jp
plus.sanrio.co.jp
www.sanrio.co.jp
akamai-san10.exacttarget.com
stores.tesco.com.pagescdn.com
search.sanrio.co.jp
english.sanrio.co.jp
license.sanrio.co.jp
shop.sanrio.co.jp
shared-certificate.user-space.cdn.idcfcloud.net
shared-certificate.user-space.cdn.idcfcloud.net
shared-certificate.user-space.cdn.idcfcloud.net
ranking.sanrio.co.jp
corporate.sanrio.co.jp
www.sanrio.co.jp
adfs.sanrio.co.jp
akamai-san10.exacttarget.com
ec-stg.sanrio.co.jp
click.friends.sanrio.co.jp
www.sanrio.co.jp
stores.sanrio.co.jp
akamai-san10.exacttarget.com
pub.friends.sanrio.co.jp
faq.sanrio.co.jp
ec-stg.sanrio.co.jp
akamai-san10.exacttarget.com
oma-ia.sanrio.co.jp
admin.ranking.sanrio.co.jp
ftdev.test.sanrio.co.jp
mailmag.sanrio.co.jp
www.sanrio.co.jp
faq.sanrio.co.jp
pages.friends.sanrio.co.jp
view.friends.sanrio.co.jp
shop.sanrio.co.jp
stores.sanrio.co.jp
license.sanrio.co.jp
locations.gwwade.com
www.shop.sanrio.co.jp
akamai-san10.exacttarget.com
ec-stg.sanrio.co.jp
tensaikansai.sanrio.co.jp
mailmag.sanrio.co.jp
oma-ia.sanrio.co.jp
www.sanrio.co.jp
*.sanrio.co.jp
faq.sanrio.co.jp
akamai-san10.exacttarget.com
ec-stg.sanrio.co.jp
pub.friends.sanrio.co.jp
www.sanrio.co.jp
akamai-san10.exacttarget.com
faq.sanrio.co.jp
www.sanrio.co.jp
www.sanrio.co.jp
search.sanrio.co.jp
oma-ia.sanrio.co.jp
locations.telemus.com
shared-certificate.user-space.cdn.idcfcloud.net
shared-certificate.user-space.cdn.idcfcloud.net
stores.ippudo.co.id
stores.sanrio.co.jp
shop.sanrio.co.jp
license.sanrio.co.jp
shop.sanrio.co.jp
pages.friends.sanrio.co.jp
click.friends.sanrio.co.jp
view.friends.sanrio.co.jp
license.sanrio.co.jp
click.friends.sanrio.co.jp
akamai-san10.exacttarget.com
view.friends.sanrio.co.jp
license.sanrio.co.jp
pages.friends.sanrio.co.jp
akamai-san10.exacttarget.com
view.friends.sanrio.co.jp
mailmag.sanrio.co.jp
click.friends.sanrio.co.jp
www.sanrio.co.jp
sp.shop.sanrio.co.jp
stores.ippudo.co.id
akamai-san10.exacttarget.com
admin.ranking.sanrio.co.jp
oma-ia.sanrio.co.jp
shared-certificate.user-space.cdn.idcfcloud.net
www.sanrio.co.jp
shared-certificate.user-space.cdn.idcfcloud.net
ranking.sanrio.co.jp

Certificate

The complete raw certificate details for sanrio.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6DISV4JSYb/AcUpEk32
o4gYAlZRGOmMS0dgMlNUqXczlo19RGNWZWgBttDgpcQ3NodmvVmXrwcTVLy2Y3kr
xpV3SYgUPcjkPiig5dtu9EL34dUFV31X3urLM1II4BoKMHDoSPZuZIushBCziLzx
5wKZPObDu//BrwvFh/Lf8mZSYHMJAyo98HvqaRpiKoWrWbDu2vSVmb4cwXUOTqoT
fWAWLr9wGc1oiGs6X/YbriuYTo7QGXJYKi2BdJULxdxPWGpQyDK8rc6e718tbKNv
L+dHLkGwg+3XCC0vkHknfPs67IOuReHWd4F45kvitNPPAyfjgQCWxU0T9AHk9NKD
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19185374446345803599624987539447969543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanrio.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24190800989898749110135126000540572033002531286849686520537466833201101771087960200924553386376563507059439131117113046358018689969542712624755175290856793603412466714990363126360930945396054927851642901750291792993938342965157122015254871791980039223138304483912670559834456509193566669154851032860214314875630096280445734008678853439111852284524847015802979486218613445291441735415667789592065890694396190907762859356749543177816187015345304127452854029383505652881542396058636018135670320073978666416318012687049719842727950662793137085005380931667122580003077090545291360999676960229000332659741242850839645815553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68ec0d8858ceff8ce3f1fa24b476eb978561a098
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanrio.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanrio.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000169b27139d900000403004730450220037a9f1e8cd18a4b2098001ae2ae494d23b5c0956047ed637f6fa361626e74bd02210085dfe0ee47876b7aa6d38be2f168f7764fcb464a1f87c55b9977b5b0abd6147a0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169b2713af30000040300473045022100b2c5a5dce21400baec60c9d2592c6c75658731f713d77e20a4e730dd51c8b503022004383470d60be2769a84343d38addd4b5a77e2e060923eaf603e805f3b42f273
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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