adastria.co.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 05:ef:03:25:2f:5c:fe:0c:75:7c:b7:67:2e:50:c4:08 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=adastria.co.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ef:03:25:2f:5c:fe:0c:75:7c:b7:67:2e:50:c4:08
Serial Number (int): 7887162721443443498450771668838171656
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 87:a7:2e:d3:2a:1c:75:a0:19:7e:09:91:fa:4f:1e:e4:f4:cf:55:bf
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 95:29:31:b1:b8:fe:d0:7f:73:e6:6d:d0:cf:2f:82:fe:dd:56:a1:cd
Fingerprint (sha256): 0e:c3:2d:f2:68:93:74:0a:2f:27:48:ad:79:3e:21:32:73:78:ef:3a:25:11:b3:22:a6:21:ca:b1:26:19:f2:ed

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate adastria.co.jp

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adastria.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adastria.co.jp
adastria-gs.co.jp
www.point.co.jp
studio-clip.jp
point.co.jp
nikoand.jp

Other certificates including the domain name adastria.co.jp

(limited to 100 certificates)
project-a.adastria.co.jp
collabo.adastria.co.jp
act.adastria.co.jp
test.adastria.co.jp
waribiki.adastria.co.jp
stylelab.adastria.co.jp
www.hillsshiresymphonyorchestra.org.au
*.coredb-prd.adastria.co.jp
stylelab.adastria.co.jp
www.moonlocker.org
pf3.eggs.or.kr
adastria.co.jp
qcs.adastria.co.jp
*.coredb-dev.adastria.co.jp
emvento.com
act.adastria.co.jp
www.coffeemeetspolished.com
www.yatribuddy.com
ad-portal.adastria.co.jp
nordahl.vetspire.com
jpp-tableau.adastria.co.jp
jamesstuddart.co.uk
project-a.adastria.co.jp
adastria.co.jp
polytangle.com
dev-twec.adastria.co.jp
*.coredb-prd.adastria.co.jp
mereaux.org
collabo.adastria.co.jp
dev-twec.adastria.co.jp
api.outerspacepark.com
stylelab.adastria.co.jp
adastria.co.jp
www.moreflux.com
recruit.adastria.co.jp
playfashion.adastria.co.jp
turlockjournal.column.us
adastria.co.jp
jpd-spllbalb05.adastria.co.jp
recruit.adastria.co.jp
adastria.co.jp
waribiki.adastria.co.jp
www.mh-integrity.com
nordahl.vetspire.com
waribiki.adastria.co.jp
www.adastria.co.jp
jpd-spllbalb03.adastria.co.jp
waribiki.adastria.co.jp
*.coredb-dev.adastria.co.jp
act.adastria.co.jp
test.adastria.co.jp
www.viraeshop.com
adastria.co.jp
jpd-spllbalb02.adastria.co.jp
adjust.adastria.co.jp
waribiki.adastria.co.jp
adastria.co.jp
*.pst.gec.adastria.co.jp
adastria.co.jp
waribiki.adastria.co.jp
www.adastria.co.jp
adastria.co.jp
jamesstuddart.co.uk
recruit.adastria.co.jp
sale.adastria.co.jp
waribiki.adastria.co.jp
5second.com
*.dev.gec.adastria.co.jp
playfashion.adastria.co.jp
act.adastria.co.jp
sale.adastria.co.jp
digitalsoul.report
www.adastria.co.jp
npsimg.adastria.co.jp
portal.adastria.co.jp
asc2020.adastria.co.jp
ismailhsici.com
stg-playfashion.adastria.co.jp
jpd-tableau.adastria.co.jp
portal-tst.adastria.co.jp
adastria.co.jp
stg-playfashion.adastria.co.jp
citycraft.io
*.coredb-dev.adastria.co.jp
csr.adastria.co.jp
stylelab.adastria.co.jp
www.adastria.co.jp
www.adastria.co.jp
collabo.adastria.co.jp
www.adastria.co.jp
www.adastria.co.jp
portal.adastria.co.jp
pass.kitomer.app
alc.adastria.co.jp
waribiki.adastria.co.jp
www.adastria.co.jp
act.adastria.co.jp
playfashion.adastria.co.jp
www.adastria.co.jp
act.adastria.co.jp

Certificate

The complete raw certificate details for adastria.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4PW7J4yfxdNgHjFejJ4
780CHM/t/YQbUKTPaFPFS4x1iMt9gJKWoXJLx0uFSkEYh1ImAHfIhFyE03Bdj0lp
3YwSpy9XGd3Rqf923H00JTXP5H0Zp/OB9NVbgtyRmZQf5dzsFDUqZKpBuEQqU997
RWilEfX+4pL1lV5QOGU3B5YX7hQL8J+QybNwGuOCPNhR4Qbc/0EM2N2cwCi/Jxst
ooNmpYfPpY5EyGbIPeesUIHYoVOtP75XkSARORCE00oTLmZK0XD4QaxseKo+Vl2y
T3MUEha+XOeH07J1Gt9Myvq1GmMMCMVexNojCypY5LIDO1ABAaEhdk8A7kTu0+2v
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7887162721443443498450771668838171656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adastria.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18622043334180361178145282807446085364917236405871285314643962513792837058326070325045365053565439811211343224239931035746703133286663688297436193037458557160528227170734114428019995469690149302637661234271787287196077622633910344284144598849890485348469486698054511912199624697650881162493120065904683356023723017101529666326258629931255913374492146124095282968961139023546303527173965134812831011163628904354881615469396080815922157931944573444931572238463460019732880557494910284946136022505321563694532600625397341173108359160641169636600566870354057031469388415663559886011489400507903880410472406414128472502069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87a72ed32a1c75a0197e0991fa4f1ee4f4cf55bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adastria.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adastria-gs.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.point.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio-clip.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'point.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikoand.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001813148eda7000004030047304502203c3e84fbd813198c9bf89b194649b91c7b1e03c5b855107b93364d7eec4a60af022100c1f323ec760c1c37abd621d621cc4eee4802ffac16a194cd350b8b04a645479a00750035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c000001813148edb9000004030046304402207c7e37b89d976fd4a1bfd2ce25d40991afc6f7039e4cfd6d1e2679adcb27d397022021bd108b91ebf6628627e0d7d7e5622fb33ab22725b61a3133d3358f40fa8f54007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001813148edeb0000040300463044022032a904d6ef3e5c684c87305ca65ea9093ac49b8589f7d05c6cc253df5c9684b80220182112f253710f34c10e3beb04cb5ff4cb0f7bbf4578f373976e26567c00829b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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