opentouryo.osscons.jp

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:31:67:30:01:d6:40:2d:a5:c1:1c:89:37:5a:10:3f:b3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opentouryo.osscons.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:31:67:30:01:d6:40:2d:a5:c1:1c:89:37:5a:10:3f:b3
Serial Number (int): 316528269188543857502669197615771579072435
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:6f:e7:cb:d3:85:9e:ea:a5:7e:3f:14:b8:07:c9:85:72:cb:2d:7d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:29:84:b2:a1:dd:3a:97:97:c7:8d:37:1b:5e:5d:f6:58:2a:67:34
Fingerprint (sha256): 13:01:96:b7:b5:93:79:0b:87:8d:08:59:a1:86:51:b5:71:55:58:5a:51:32:e6:5a:78:aa:2c:08:48:08:08:43

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate opentouryo.osscons.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opentouryo.osscons.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opentouryo.osscons.jp

Other certificates including the domain name osscons.jp

(limited to 100 certificates)
techinfoofmicrosofttech.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
opentouryo.osscons.jp
opentouryo.osscons.jp
opentouryo.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
osscons.jp
www.osscons.jp
techinfoofmicrosofttech.osscons.jp
opentouryo.osscons.jp
techinfoofmicrosofttech.osscons.jp
techinfoofmicrosofttech.osscons.jp
www.osscons.jp
techinfoofmicrosofttech.osscons.jp
techinfoofmicrosofttech.osscons.jp
opentouryo.osscons.jp
opentouryo.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
opentouryo.osscons.jp
techinfoofmicrosofttech.osscons.jp
opentouryo.osscons.jp
opentouryo.osscons.jp
www.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
www.osscons.jp
opentouryo.osscons.jp
opentouryo.osscons.jp
opentouryo.osscons.jp
opentouryo.osscons.jp
www.osscons.jp
techinfoofmicrosofttech.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
techinfoofmicrosofttech.osscons.jp
osscons.jp
www.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
www.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
techinfoofmicrosofttech.osscons.jp
opentouryo.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
opentouryo.osscons.jp
www.osscons.jp
opentouryo.osscons.jp
techinfoofmicrosofttech.osscons.jp
techinfoofmicrosofttech.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
techinfoofmicrosofttech.osscons.jp
opentouryo.osscons.jp
opentouryo.osscons.jp
www.osscons.jp
business.osscons.jp
www.osscons.jp
techinfoofmicrosofttech.osscons.jp
www.osscons.jp
opentouryo.osscons.jp
opentouryo.osscons.jp
osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
www.osscons.jp
www.osscons.jp
opentouryo.osscons.jp
techinfoofmicrosofttech.osscons.jp
www.osscons.jp
www.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
techinfoofmicrosofttech.osscons.jp
techinfoofmicrosofttech.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
www.osscons.jp
techinfoofmicrosofttech.osscons.jp
techinfoofmicrosofttech.osscons.jp
opentouryo.osscons.jp
www.osscons.jp
techinfoofmicrosofttech.osscons.jp
osscons.jp
techinfoofmicrosofttech.osscons.jp
opencobol-redmine.osscons.jp
www.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
www.osscons.jp
opentouryo.osscons.jp
osscons.jp
osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
opencobol-redmine.osscons.jp
www.osscons.jp
www.osscons.jp
opentouryo.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
osscons.jp
dotnetdevelopmentinfrastructure.osscons.jp
techinfoofmicrosofttech.osscons.jp
www.osscons.jp

Certificate

The complete raw certificate details for opentouryo.osscons.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyptqRv2UdyXj5uL8f+i1
D/PIhJjRaHheDlXet6tz59sp5veOVUz3B7u6zuprV4zzoxjceplcWNZwnVPwNd1d
L3l3fTlav9gRcrZlwoBkdjAWdBoOslR4Ml/AWzumAQo0AOrPnn6f10Qf7uOD4tlH
kXYsXgFn+e83T0D/z9GKwyWbSsWkOd1oaweounkYwVJD9FiqgXoeHHQD31EPFiKb
qsevSvZLWXtS//tHkz5tBzRAzhmD6KkrxoLuaM62BuZ82EdaLFrkbnnms5aGOnOt
TssZapk1HyKgYCP9R/2OEQduyhTBc0XU8hsjN+nJ0wzfGwiVSPFZF7/HauDHGj4y
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316528269188543857502669197615771579072435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 19:10:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 19:10:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opentouryo.osscons.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25576775667842982352369452381159687980210740714215497560712767041816932927876549576430022591232739111129659721063901954301722193835298740506804987158648511334715706856404660374514909759290661032357029659771386271879122469149801662107728719856652838882236723276328292753993376981713929459827877165679201983415177943027913502194453296206539888483626204918922343540986799143815064494058938286310048634423078371222384581311967277831012808605988478288987738532117632679425381328815168936664593716903561889472503695211873624219302245816740868320305841293106821254191703470297324062302639440448909709806114312967570853868081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							726fe7cbd3859eeaa57e3f14b807c98572cb2d7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opentouryo.osscons.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ebdef8fc0000004030047304502205366455d8bdfb8682febf6601f65b781549c2408b0c86e6214c0d819d778665c022100cf0bb69028b1a067bf8022b3732c286d88ea8bf81c89b8f8e6a4648702e804fc00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ebdef8fce0000040300463044022015b17b7403e1b05d4aec79f34af6b6bd05ddbc120ad811e55270393558ec44d502204c35c76bae73e1bc2135c676bc1069bb01dd9c5a09f838eb5b41e047a0aeb9d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0002968bf761d60db557fe82a34172ff14e7d7851b26aa950d7a3c732f8d05a456555d7d341c20535c6fd2cd401032c7f03a53a5627ff60d8ed75fb2be2d098a0d7a4977956a37be79234eaa3d86e4e085f71122873d62bdcb24aeb2ae7f1a7cee81e73ebfd5e44970c9d403250adb804c4527ee16c2e19f3056baa7abb045c0bef6dbb7bbbc638009b28dced63777ef8ccb6e290145449c164a0715153cb13df11c4eef0abb25f3d152658cc7215062f7854f043dbe5e81c8048df033daed9fe9ce2aa3eb7e18e48b18d2c490cc1aab9bbb383556ba07b683fceee2e4bf928dcaf55b9f89259263269a22637d8b567c9ca1f95f208cff9900601fb95d663c43c0