nakagawa-town.city-hc.jp

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:19:84:24:0f:f8:b7:51:a0:c4:b8:11:ff:b5:f7:43:03:94 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nakagawa-town.city-hc.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:84:24:0f:f8:b7:51:a0:c4:b8:11:ff:b5:f7:43:03:94
Serial Number (int): 270019562310376180472782763099289395856276
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 50:54:6b:bd:0e:eb:a0:3e:24:16:53:35:e3:b9:fd:ab:94:cb:0f:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:b9:ad:11:2e:be:a3:78:01:dc:7c:2d:ba:1a:d1:00:c5:2e:89:59
Fingerprint (sha256): 0d:af:12:28:15:f2:9b:86:af:f3:5b:7c:6a:2d:28:18:e9:52:d1:2f:e2:d0:70:c6:7e:d9:d4:28:8b:28:7d:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nakagawa-town.city-hc.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nakagawa-town.city-hc.jp

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nakagawa-town.city-hc.jp

Other certificates including the domain name city-hc.jp

(limited to 100 certificates)
mitaka.city-hc.jp
ssl3.city-hc.jp
chdev.city-hc.jp
ssl3.city-hc.jp
yame.city-hc.jp
moka.city-hc.jp
inuyama.city-hc.jp
ayase.city-hc.jp
yashio.city-hc.jp
hachioji.city-hc.jp
polaris.city-hc.jp
hioki.city-hc.jp
inuyama.city-hc.jp
ssl.city-hc.jp
ssl3.city-hc.jp
corkboard.city-hc.jp
mitaka.city-hc.jp
corkboard.city-hc.jp
kita.city-hc.jp
kasaoka.city-hc.jp
polaris.city-hc.jp
fujinomiya.city-hc.jp
shizuoka.city-hc.jp
shinagawa.city-hc.jp
musashino.city-hc.jp
yamato.city-hc.jp
nakagawa-town.city-hc.jp
katano.city-hc.jp
corkboard.city-hc.jp
demo-c.city-hc.jp
kamisato-town.city-hc.jp
ssl2.city-hc.jp
kita.city-hc.jp
asuka-vill.city-hc.jp
shizuoka.city-hc.jp
komaki.city-hc.jp
sasaguri-town.city-hc.jp
ayase.city-hc.jp
yashio.city-hc.jp
demo-c.city-hc.jp
misato.city-hc.jp
shinagawa.city-hc.jp
kawaguchi.city-hc.jp
adachi-mamenoki.city-hc.jp
yashio.city-hc.jp
katano.city-hc.jp
nakagawa.city-hc.jp
corkboard.city-hc.jp
ssl2.city-hc.jp
gamagori.city-hc.jp
yachiyo.city-hc.jp
ssl4.city-hc.jp
ageo.city-hc.jp
sasaguri-town.city-hc.jp
kamisato-town.city-hc.jp
mitaka.city-hc.jp
hioki.city-hc.jp
misato.city-hc.jp
atsugi.city-hc.jp
ageo.city-hc.jp
chdev.city-hc.jp
yame.city-hc.jp
ssl.city-hc.jp
ssl.city-hc.jp
yashio.city-hc.jp
kasaoka.city-hc.jp
kamisato-town.city-hc.jp
ssl4.city-hc.jp
polaris.city-hc.jp
chdev.city-hc.jp
sasaguri-town.city-hc.jp
yachiyo.city-hc.jp
musashino.city-hc.jp
yamato.city-hc.jp
ssl3.city-hc.jp
hirakata.city-hc.jp
ssl3.city-hc.jp
komaki.city-hc.jp
chdev.city-hc.jp
kawaguchi.city-hc.jp
atsugi.city-hc.jp
komaki.city-hc.jp
aisai.city-hc.jp
gotemba.city-hc.jp
kita.city-hc.jp
yame.city-hc.jp
inuyama.city-hc.jp
iizuna-town.city-hc.jp
numazu.city-hc.jp
ssl.city-hc.jp
inuyama.city-hc.jp
sasaguri-town.city-hc.jp
koganei.city-hc.jp
ccvps2.city-hc.jp
ssl.city-hc.jp
ome.city-hc.jp
saijo.city-hc.jp
hioki.city-hc.jp
yashio.city-hc.jp
kita.city-hc.jp

Certificate

The complete raw certificate details for nakagawa-town.city-hc.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270019562310376180472782763099289395856276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-30 05:02:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-28 05:02:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nakagawa-town.city-hc.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 988679837796670196572134619531371282530210030421357849595666745657237562311116736142141903419079854968392874543389739187750065958800955552540113112964491896283811031262605876290214491633344903746701937343466043252528123254055084743120993010581693500761887158175765627820060320155865489353924591008597737752522289494964885993940921789968928492335250048958175560799437165051640349943253309273688050398593993500152962675322007152081533264859372734250461464398498521544020027599597852576422175928690629476203195856356654694715640576751804393072483761891429536089712718227143098263620422004347032229919580062379261928311492039755758526582193701018769418640150236172207820965849143575202991209232628574033273832156534416398707996346916781147470662900638421919587555951353645732151193712914643011928145049471520267288364651600967151399021547139702045230313393834111868987643029758078955631468142762786427844048612225683796655244967774883180821972102637763916625565986426459312772430445367181602581980334674209417147367954267025985611847029216075264743712041718789293113518465923845673104158750176738966462826841414952835541466391660709661176256676858558767258993501372495344891548601779439257764508631509349643653000356140453710176687619059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50546bbd0eeba03e24165335e3b9fdab94cb0f76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakagawa-town.city-hc.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001676335e426000004030047304502204ac67af7d70c6b9a458f364e5ea91add66fc5789906a444566a86e3a69b26bd3022100d65547fad735ecca420ce00f9f06fdf852ed803b3ddcff93919efcc8434a36c500750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001676335e485000004030046304402202900594670f93a5795a04b7a936b9ab6f39b953114bf00ae47e47ea55b19c100022059b8760a8328a3b0c727fc23e7e9be9afe3e0ca8f21809b244b583d297df0e19
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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