musashino.jrc.or.jp

Issued by JPRS Domain Validation Authority - G2

About this certificate

This digital certificate with serial number 4f:20:4c:6e:de:76:55:92 was issued on by Japan Registry Services Co., Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Certificate Subject

CN=musashino.jrc.or.jp

Japan Registry Services Co., Ltd.

Organization: Japan Registry Services Co., Ltd.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:20:4c:6e:de:76:55:92
Serial Number (int): 5701641167313458578
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: ae:52:90:6b:11:0e:5e:60:e3:0d:01:cc:34:fb:27:86:89:ac:cd:8d
AuthorityKeyId: bb:3a:ea:57:62:78:0c:32:ad:1f:b2:7b:f6:1d:06:22:96:e1:ab:f0

Fingerprint (sha1): 47:dc:20:4b:fc:bf:99:ce:b5:26:c2:98:39:1a:68:ef:9e:23:8b:9d
Fingerprint (sha256): 16:90:1c:6d:d8:35:3f:04:27:15:a1:b7:39:8f:46:cb:fe:60:fb:59:37:16:a9:4e:18:4c:01:56:f9:95:f1:c4


Revocation information

OCSP Server: http://dv.g2.ocsp.pubcert.jprs.jp
CRL Distribution Point: http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g2/fullcrl.crl

Check the revocation status for certificate musashino.jrc.or.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for musashino.jrc.or.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

musashino.jrc.or.jp
www.musashino.jrc.or.jp

Other certificates including the domain name jrc.or.jp

(limited to 100 certificates)
www.nagoya-1st.jrc.or.jp
www.maebashi.jrc.or.jp
www.tkhr.bbc.jrc.or.jp
www.matsuyama.jrc.or.jp
www.nagasaki-med.jrc.or.jp
www.shizuoka.jrc.or.jp
fukuoka-med.jrc.or.jp
www.hokkaido.jrc.or.jp
www2.nagoya2.jrc.or.jp
www.hyogo.jrc.or.jp
www2.nagoya2.jrc.or.jp
?.?.jrc.or.jp
www.shizuoka.jrc.or.jp
ken-online.tkhr.bbc.jrc.or.jp
www.bs.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
trk.bmdc.jrc.or.jp
www.nagoya2.jrc.or.jp
www.shizuoka.jrc.or.jp
ehime.jrc.or.jp
www.gifu-med.jrc.or.jp
www.shizuoka.jrc.or.jp
www.omori.jrc.or.jp
masuda.jrc.or.jp
www.koga.jrc.or.jp
www.nagasaki-med.jrc.or.jp
www.saitama.bc.jrc.or.jp
www.yamanashi.bc.jrc.or.jp
app-ndrc.jrc.or.jp
ashikaga.jrc.or.jp
katsushika.jrc.or.jp
date-kango.jrc.or.jp
www.aichi.jrc.or.jp
kochi-med.jrc.or.jp
www.kumamoto.jrc.or.jp
www.saitama.bc.jrc.or.jp
www.okayama-med.jrc.or.jp
www.koga.jrc.or.jp
www.bs.jrc.or.jp
www.asahikawa.jrc.or.jp
www.otsu-sn.jrc.or.jp
www.kyoto.bc.jrc.or.jp
www.kyoto2.jrc.or.jp
www.nagasaki-med.jrc.or.jp
niigata.jrc.or.jp
www.shizuoka.jrc.or.jp
trk.bmdc.jrc.or.jp
cybozugaroon.bsh.jrc.or.jp
www.osaka-med.jrc.or.jp
niigata.jrc.or.jp
www.med.jrc.or.jp
www.nagano.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
www.matsuyama.jrc.or.jp
ashikaga.jrc.or.jp
fukushima.jrc.or.jp
www.chiba.jrc.or.jp
www.shiga.jrc.or.jp
www.shizuoka.jrc.or.jp
www.nagahama.jrc.or.jp
ajis.jrc.or.jp
kenshingw.nagoya2.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
www.matsue.jrc.or.jp
www.koga.jrc.or.jp
*.wakayama-med.jrc.or.jp
musashino.jrc.or.jp
saitama.jrc.or.jp
www.shobara.jrc.or.jp
www.nagoya-1st.jrc.or.jp
www.kobe.jrc.or.jp
webmail.kumamoto-med.jrc.or.jp
www.nagoya-1st.jrc.or.jp
www.tokushima-med.jrc.or.jp
www.yamagata.bc.jrc.or.jp
www.kyoto.bc.jrc.or.jp
www.hokkaido.bc.jrc.or.jp
saitama.jrc.or.jp
www.maebashi.jrc.or.jp
www.tokyo.bc.jrc.or.jp
www.hokkaido.bc.jrc.or.jp
www.fukaya.jrc.or.jp
www.shizuoka.jrc.or.jp
www.takamatsu.jrc.or.jp
ssl.ishinomaki.jrc.or.jp
www.shizuoka.jrc.or.jp
www.narita.jrc.or.jp
photogallery.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
www.azumino.jrc.or.jp
www.nagano.jrc.or.jp
www.takamatsu.jrc.or.jp
www.shizuoka-med.jrc.or.jp
ajis.jrc.or.jp
fukuoka-med.jrc.or.jp
www.osaka-med.jrc.or.jp

Certificate

The complete raw certificate details for musashino.jrc.or.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwKEdP5BI2iui+oS2dq5
9s6NhE+r95hNsltS3tcDKf2uoU9nQjNHc7FB87Zz1I6R/harKiT1/uk0M0k/Wb0G
oUPhQ6HtmW8NRKgxkImB+B7zhoIlPWQmyZwvpkipPGN0M5dmAuKt2CPybd9u3E1w
aTqOa8UocKY7CiZiM2YL08V7VnFW23vxtDT4nsp2oo7rGuaiFebTy5CcckTPknv8
wUK84GCbllTn/49Y+yt4o3/0ZJFbNVAIOTx4OPHQwZYnJPFrqB7oKROokk5eh5si
3+ZZ5dcZxMXxQRtR5V5Ju1tWPh/eSAlEu12o+U7iWuu+ucwmtywuB6Q7rWCzolmM
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5701641167313458578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Japan Registry Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JPRS Domain Validation Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 06:55:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'musashino.jrc.or.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25122664069469513746875152709474943454329438814685796606654312345439401116377876336766045551649169846951780705806539956477102909271089099654438502705216353552335121980758075188319202259632785141896132223903027377129466362710899075147606402407527963601269131228482196015153335469597998297392346823150026083142592418850985222440763409577021080208725730858601230954142793798870537986509816703457794158016430394571139725114846585675480066813792969428951077571511535225645969019425145563781428303548978187748572769799415439980139995971565238499154318640561774903812910339181395695191894571805095748233779317738759467404389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bb3aea5762780c32ad1fb27bf61d062296e1abf0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dv.g2.ocsp.pubcert.jprs.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musashino.jrc.or.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musashino.jrc.or.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.208.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://jprs.jp/pubcert/info/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g2/fullcrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae52906b110e5e60e30d01cc34fb278689accd8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0032cfa9676dd1e23945984abe2ab650af2dc0f58c0aa91a7c67050eb8a65854d9381432934ab2010b20e8992a0e9ad8af0da5950655ee8cedeb4b3745501eb27bb33edf8777d89e1f3c9271ed06a421d536f4c43e4eafb842c5e550e5ef14df90734b40d1d8cd236a0fc1946a4df1ce9f22e0ea67d2c798a7f076ee95a7ac35656c42d0e1e3e83bd2073f026d024be45cd073528dbc6f96c4556c3df6346c86c87e0fc88974a5bdd978c4302bed334293cfd86123bea934d1154b00ef020b3b55b2578848d0da3a7bf18b57c924282368da7f62a7b2a27d1f3c94667c300026c9239d43ae6afae95f27c60e4288c7662cd10b2dbb6b4503b3cb063053f51806aa