niigata.jrc.or.jp

Issued by KDDI Web Communications Certification Authority 3

About this certificate

This digital certificate with serial number 61:a8:97:0f:e2:30:cf:ce was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Certificate Subject

CN=niigata.jrc.or.jp

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 61:a8:97:0f:e2:30:cf:ce
Serial Number (int): 7037040512241553358
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 0e:f3:15:06:f6:d3:19:9a:e7:3e:ba:67:64:51:14:b8:a7:ee:30:f0
AuthorityKeyId: d5:85:07:1e:68:1b:a7:2f:8f:d5:ca:92:60:52:d1:71:08:5d:70:b0

Fingerprint (sha1): a7:94:5b:5a:37:6c:d4:df:18:d4:6c:de:99:be:e6:5f:49:15:07:4b
Fingerprint (sha256): 0f:ea:5d:45:18:d8:67:16:9f:f1:65:6a:ff:92:dc:a9:24:5c:ac:b1:3c:e8:f0:d3:b8:6a:53:6b:81:5e:eb:e6


Revocation information

OCSP Server: http://kddiweb3.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/kddiweb3/fullCRL.crl

Check the revocation status for certificate niigata.jrc.or.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for niigata.jrc.or.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

niigata.jrc.or.jp

Other certificates including the domain name jrc.or.jp

(limited to 100 certificates)
www.nagoya-1st.jrc.or.jp
www.maebashi.jrc.or.jp
www.tkhr.bbc.jrc.or.jp
www.matsuyama.jrc.or.jp
www.nagasaki-med.jrc.or.jp
www.shizuoka.jrc.or.jp
fukuoka-med.jrc.or.jp
www.hokkaido.jrc.or.jp
www2.nagoya2.jrc.or.jp
www.hyogo.jrc.or.jp
www2.nagoya2.jrc.or.jp
?.?.jrc.or.jp
www.shizuoka.jrc.or.jp
ken-online.tkhr.bbc.jrc.or.jp
www.bs.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
trk.bmdc.jrc.or.jp
www.nagoya2.jrc.or.jp
www.shizuoka.jrc.or.jp
ehime.jrc.or.jp
www.gifu-med.jrc.or.jp
www.shizuoka.jrc.or.jp
www.omori.jrc.or.jp
masuda.jrc.or.jp
www.koga.jrc.or.jp
www.nagasaki-med.jrc.or.jp
www.saitama.bc.jrc.or.jp
www.yamanashi.bc.jrc.or.jp
app-ndrc.jrc.or.jp
ashikaga.jrc.or.jp
katsushika.jrc.or.jp
date-kango.jrc.or.jp
www.aichi.jrc.or.jp
kochi-med.jrc.or.jp
www.kumamoto.jrc.or.jp
www.saitama.bc.jrc.or.jp
www.okayama-med.jrc.or.jp
www.koga.jrc.or.jp
www.bs.jrc.or.jp
www.asahikawa.jrc.or.jp
www.otsu-sn.jrc.or.jp
www.kyoto.bc.jrc.or.jp
www.kyoto2.jrc.or.jp
www.nagasaki-med.jrc.or.jp
niigata.jrc.or.jp
www.shizuoka.jrc.or.jp
trk.bmdc.jrc.or.jp
cybozugaroon.bsh.jrc.or.jp
www.osaka-med.jrc.or.jp
niigata.jrc.or.jp
www.med.jrc.or.jp
www.nagano.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
www.matsuyama.jrc.or.jp
ashikaga.jrc.or.jp
fukushima.jrc.or.jp
www.chiba.jrc.or.jp
www.shiga.jrc.or.jp
www.shizuoka.jrc.or.jp
www.nagahama.jrc.or.jp
ajis.jrc.or.jp
kenshingw.nagoya2.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
www.matsue.jrc.or.jp
www.koga.jrc.or.jp
*.wakayama-med.jrc.or.jp
musashino.jrc.or.jp
saitama.jrc.or.jp
www.shobara.jrc.or.jp
www.nagoya-1st.jrc.or.jp
www.kobe.jrc.or.jp
webmail.kumamoto-med.jrc.or.jp
www.nagoya-1st.jrc.or.jp
www.tokushima-med.jrc.or.jp
www.yamagata.bc.jrc.or.jp
www.kyoto.bc.jrc.or.jp
www.hokkaido.bc.jrc.or.jp
saitama.jrc.or.jp
www.maebashi.jrc.or.jp
www.tokyo.bc.jrc.or.jp
www.hokkaido.bc.jrc.or.jp
www.fukaya.jrc.or.jp
www.shizuoka.jrc.or.jp
www.takamatsu.jrc.or.jp
ssl.ishinomaki.jrc.or.jp
www.shizuoka.jrc.or.jp
www.narita.jrc.or.jp
photogallery.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
www.azumino.jrc.or.jp
www.nagano.jrc.or.jp
www.takamatsu.jrc.or.jp
www.shizuoka-med.jrc.or.jp
ajis.jrc.or.jp
fukuoka-med.jrc.or.jp
www.osaka-med.jrc.or.jp

Certificate

The complete raw certificate details for niigata.jrc.or.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eZOl2AmNlm8khx2NqkC
k95fzA3ARIx8aMrmRZFsNlWgG/vUOBN+kcWQFQLl20CQ37tAwY66SU/83K5ePW2W
rAIR2X8yX3fAcxo9xJRqbXncbe2IMDhHsgKGR0R6R0UJjKzHZUrcHJ+OiorE1tW8
kPVNdp3yHZKuWRugHxcKeshW+fvzyLEhZRKMY8BB1rjRHiZooBoDMImU5xvYgDaa
6qstpcTLS5sYo5lEuHDqiuLZzgNR3L6BlTlNW7sMoMtBKGyorTe3f+yDa4e0kGLL
pq8c2TbTLDoE/2E2W85ManCOaz4RackX7klvEw0nx7rOg90DWz4ZeATSoz96YSu4
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7037040512241553358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KDDI Web Communications Certification Authority 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-04 05:12:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 05:22:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'niigata.jrc.or.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29022140450360221670314281229794820913887048667621663267576266636169610123922272481167975924395810274177364145187432748408778120165667594101368164948887180652695511025148631802293792836750048165782933218937969338548346960069617230436593125345342648627043134066256732774955744217707724905500208261120930575626973887964883930098240277080304541981874719587501485077860797077740381478980167359678762680572941341848826595023793844136854846496194174855526463396993296500437256201879462359879010579402664556099218164638515980664171639455060526015031977914302982369208052139510619234449991450144950432172865479877123679959289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d585071e681ba72f8fd5ca926052d171085d70b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://kddiweb3.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niigata.jrc.or.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.213.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/kddiweb3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/kddiweb3/fullCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ef31506f6d3199ae73eba67645114b8a7ee30f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007f589053cf461c0932e8b9df81dceac6f75ab6daebf07da4206022c8b4701fff074a4973b769a25274d77073fe55e76c724ba72ca44f30b6baf7e4108cfe2b2d40cb6f1f64a9ab0f582b568fcc88185cf0a3ede8ee799d3995778a8d5406744ed6540c959845bc2de3c8076597e3839aef2ebf8b7b76de6b0c78f4dbbd0caf7ce57c4f0a334b09f9d7b97c0bbf598e1f42bd275b5dbf1f58570ec697ec36b26c7a520a9b44f1983c00a95ea605050760867648e9c4f76ce872f0c9cefd524ee6c8b98945ba757e79f115ef39ee5b6c90ae02fb4879abf0a2801c6789783f0eca7d58654959b5290020a429f190ade8ef1a691872b579cda2cd5c53e55e64aeab