www.tokushima-med.jrc.or.jp

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 62:3f:2a:c4:aa:43:1b:fb:52:54:83:e0 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tokushima-med.jrc.or.jp

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 62:3f:2a:c4:aa:43:1b:fb:52:54:83:e0
Serial Number (int): 30405895256350337921325499360
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 1b:26:b7:d5:e8:14:c4:aa:ab:70:3d:12:eb:29:b8:47:04:ad:ca:02
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): b3:21:56:11:bf:b4:9d:d5:ee:c7:01:f1:eb:c8:d2:84:3e:cb:64:5d
Fingerprint (sha256): 19:70:fb:f4:a4:6f:52:76:c5:bd:62:4f:b0:b0:16:5b:45:5c:ef:3a:7d:d1:38:ab:ab:9c:7f:dd:73:d7:2a:17

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.tokushima-med.jrc.or.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tokushima-med.jrc.or.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tokushima-med.jrc.or.jp
tokushima-med.jrc.or.jp

Other certificates including the domain name jrc.or.jp

(limited to 100 certificates)
www.nagoya-1st.jrc.or.jp
www.maebashi.jrc.or.jp
www.tkhr.bbc.jrc.or.jp
www.matsuyama.jrc.or.jp
www.nagasaki-med.jrc.or.jp
www.shizuoka.jrc.or.jp
fukuoka-med.jrc.or.jp
www.hokkaido.jrc.or.jp
www2.nagoya2.jrc.or.jp
www.hyogo.jrc.or.jp
www2.nagoya2.jrc.or.jp
?.?.jrc.or.jp
www.shizuoka.jrc.or.jp
ken-online.tkhr.bbc.jrc.or.jp
www.bs.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
trk.bmdc.jrc.or.jp
www.nagoya2.jrc.or.jp
www.shizuoka.jrc.or.jp
ehime.jrc.or.jp
www.gifu-med.jrc.or.jp
www.shizuoka.jrc.or.jp
www.omori.jrc.or.jp
masuda.jrc.or.jp
www.koga.jrc.or.jp
www.nagasaki-med.jrc.or.jp
www.saitama.bc.jrc.or.jp
www.yamanashi.bc.jrc.or.jp
app-ndrc.jrc.or.jp
ashikaga.jrc.or.jp
katsushika.jrc.or.jp
date-kango.jrc.or.jp
www.aichi.jrc.or.jp
kochi-med.jrc.or.jp
www.kumamoto.jrc.or.jp
www.saitama.bc.jrc.or.jp
www.okayama-med.jrc.or.jp
www.koga.jrc.or.jp
www.bs.jrc.or.jp
www.asahikawa.jrc.or.jp
www.otsu-sn.jrc.or.jp
www.kyoto.bc.jrc.or.jp
www.kyoto2.jrc.or.jp
www.nagasaki-med.jrc.or.jp
niigata.jrc.or.jp
www.shizuoka.jrc.or.jp
trk.bmdc.jrc.or.jp
cybozugaroon.bsh.jrc.or.jp
www.osaka-med.jrc.or.jp
niigata.jrc.or.jp
www.med.jrc.or.jp
www.nagano.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
www.matsuyama.jrc.or.jp
ashikaga.jrc.or.jp
fukushima.jrc.or.jp
www.chiba.jrc.or.jp
www.shiga.jrc.or.jp
www.shizuoka.jrc.or.jp
www.nagahama.jrc.or.jp
ajis.jrc.or.jp
kenshingw.nagoya2.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
www.matsue.jrc.or.jp
www.koga.jrc.or.jp
*.wakayama-med.jrc.or.jp
musashino.jrc.or.jp
saitama.jrc.or.jp
www.shobara.jrc.or.jp
www.nagoya-1st.jrc.or.jp
www.kobe.jrc.or.jp
webmail.kumamoto-med.jrc.or.jp
www.nagoya-1st.jrc.or.jp
www.tokushima-med.jrc.or.jp
www.yamagata.bc.jrc.or.jp
www.kyoto.bc.jrc.or.jp
www.hokkaido.bc.jrc.or.jp
saitama.jrc.or.jp
www.maebashi.jrc.or.jp
www.tokyo.bc.jrc.or.jp
www.hokkaido.bc.jrc.or.jp
www.fukaya.jrc.or.jp
www.shizuoka.jrc.or.jp
www.takamatsu.jrc.or.jp
ssl.ishinomaki.jrc.or.jp
www.shizuoka.jrc.or.jp
www.narita.jrc.or.jp
photogallery.jrc.or.jp
www.shizuoka.jrc.or.jp
www.shizuoka.jrc.or.jp
www.azumino.jrc.or.jp
www.nagano.jrc.or.jp
www.takamatsu.jrc.or.jp
www.shizuoka-med.jrc.or.jp
ajis.jrc.or.jp
fukuoka-med.jrc.or.jp
www.osaka-med.jrc.or.jp

Certificate

The complete raw certificate details for www.tokushima-med.jrc.or.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NjyPnzM57c5QIbI1wGd
ZTFU764uNHvhqgSO0wniricOLW22KNN8jWHPKYENjBreCRdsI+QRt4daNtlkfV6O
teerAbKqy5AFTEu/NoJKRHo5Pc/96yWfmTT9h44rSb9C0A7seU/VYg0hgxIWjs/o
DVKpmYv/tl5/1bCoik9IKyukNCPMsj59F7YyCmj4y/esFrL9VEWXtEaUmnNHrmFG
UFyQRkfkeMH6gXMiqV1FMJw4uhARYiwRxTbBDsh49sKKT+xrqrztGvNgO4kzSzkF
91a8RwJUyd+SycKnZ7VO5eHQplRsisZPeTATTI1mysk4DVVKrWaZuwuiPqAKgQIw
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30405895256350337921325499360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 05:47:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 05:47:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tokushima-med.jrc.or.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26364547623903029865145609593204821659360352561938842764879889631890817249864374337082378034401243658456590995539104381662786565412698130580526681044564105369087634994743969688682504235414509561261146905749231195039126234797393280060167759294994002386370459528011277896942234180905233898920613340382421158637765440599517568408338167318304225818779960532747875998940564264256368705167410267533965291551605112836437920578781052143637907011413899813517422685655849041359826712884555954552369865043559085078397900447954249204100184921659594757146559475823488159628926180812628098867608317961488970878514937457874600865851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokushima-med.jrc.or.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokushima-med.jrc.or.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b26b7d5e814c4aaab703d12eb29b84704adca02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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