meta-knk.city.urayasu.chiba.jp

- urayasucity -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 03:40:41:0a:0d:b2:31:32:61:fc:16:5f was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

urayasucity

Organization: urayasucity
Organization unit: johoseisaku
State / Province: chiba
Locality: urayasu
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:41:0a:0d:b2:31:32:61:fc:16:5f
Serial Number (int): 1006133421195104098199541343
Serial Number lenght: 90 bits, 12 octets

SubjectKeyId: a1:b4:42:f7:54:14:2a:9b:f7:96:9e:d4:90:a6:06:c3:0f:61:29:34
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): a1:13:a4:b7:d3:05:9e:7c:93:d0:2d:6a:73:13:f5:0f:ea:02:db:9e
Fingerprint (sha256): 1a:6b:c2:be:8e:77:b1:ef:75:ab:35:0a:01:49:33:4b:1d:ce:ba:5b:15:2b:14:e9:6b:89:4c:9e:c3:61:54:82

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate meta-knk.city.urayasu.chiba.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for meta-knk.city.urayasu.chiba.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meta-knk.city.urayasu.chiba.jp

Other certificates including the domain name city.urayasu.chiba.jp

(limited to 100 certificates)
s-yoyaku.city.urayasu.chiba.jp
s-yoyaku.city.urayasu.chiba.jp
meta-knk.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
letter.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
meta-knk.city.urayasu.chiba.jp
opac.city.urayasu.chiba.jp
usess-ttk.city.urayasu.chiba.jp
meta-knk.city.urayasu.chiba.jp
usess-ttk.city.urayasu.chiba.jp
s-yoyaku.city.urayasu.chiba.jp
m-yoyaku.city.urayasu.chiba.jp
meta-knk.city.urayasu.chiba.jp
usess-ttk.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
meta-knk.city.urayasu.chiba.jp
s-yoyaku.city.urayasu.chiba.jp
meta-knk.city.urayasu.chiba.jp
letter.city.urayasu.chiba.jp
meta-knk.city.urayasu.chiba.jp
usess-ttk.city.urayasu.chiba.jp
s-yoyaku.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
usess-ttk.city.urayasu.chiba.jp
shinsei.city.urayasu.chiba.jp
ev.city.urayasu.chiba.jp
opac.city.urayasu.chiba.jp
usess-ttk.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
usess-ttk.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
m-yoyaku.city.urayasu.chiba.jp
m-yoyaku.city.urayasu.chiba.jp
anshinnet.city.urayasu.chiba.jp
opac.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
opac.city.urayasu.chiba.jp
m-yoyaku.city.urayasu.chiba.jp
usess-ttk.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
s-yoyaku.city.urayasu.chiba.jp
meta-knk.city.urayasu.chiba.jp
usess-ttk.city.urayasu.chiba.jp
www1.city.urayasu.chiba.jp
s-yoyaku.city.urayasu.chiba.jp
s-yoyaku.city.urayasu.chiba.jp
opac.city.urayasu.chiba.jp
s-yoyaku.city.urayasu.chiba.jp
opac.city.urayasu.chiba.jp
opac.city.urayasu.chiba.jp
www1.city.urayasu.chiba.jp
m-yoyaku.city.urayasu.chiba.jp
m-yoyaku.city.urayasu.chiba.jp
opac.city.urayasu.chiba.jp
shinsei.city.urayasu.chiba.jp
meta-knk.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
anshinnet.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
ev.city.urayasu.chiba.jp
www1.city.urayasu.chiba.jp
usess-ttk.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
s-yoyaku.city.urayasu.chiba.jp
m-yoyaku.city.urayasu.chiba.jp
s-yoyaku.city.urayasu.chiba.jp
m-yoyaku.city.urayasu.chiba.jp
usess-ttk.city.urayasu.chiba.jp
meta-knk.city.urayasu.chiba.jp
opac.city.urayasu.chiba.jp
monitor.city.urayasu.chiba.jp
s-yoyaku.city.urayasu.chiba.jp
opac.city.urayasu.chiba.jp
opac.city.urayasu.chiba.jp

Certificate

The complete raw certificate details for meta-knk.city.urayasu.chiba.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/aLpU/EB0COIxvg3vNrK
wm02bsothyL1JR7A6t6f/kopZEOAU+JcW8Xdt9b/yyftmfIZdbJYMYXSaQKYV3Tl
B2NLqjZoT3VBSRGhU1HiWN0fnY+CxbuOvBx68UjUbUi8OTIc6wC6S5X92OZ0gZwr
BukY40SUwF8UFSLLz/OiK3q95htMtqhZ9m47ZVm8KQNgoRkQxnlpnVhKiRxhPUeB
7Hrzl7uWir8BkGlzWpdqCproIQSYbmLxbPUIoEm1tQQcqFZ+DvN5/FMel6w7L7nC
bQWEntrvLW0cue314kFepEYzfX64oOA0lq/ipfnG73U6nW1s4shFGFrdcLD8svRe
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1006133421195104098199541343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 11:49:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chiba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'urayasu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'johoseisaku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'urayasucity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'meta-knk.city.urayasu.chiba.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32018625780156625361809884556181088745543327735418419283448887909424829971275779706356809055051820725423655905452812235745973315076085757127781916024621741043217174155256771788738861615917921540644083513605260682595080551254928448122311249793222383082371463485070173961604159796000986569558112208684921427552494752090908622465614403552390313464641031042087563363868133247631773241131021794683194744046594801887109282503062056100092011954053963356060700940664113203685754234092462624701992393395985927866899728785900066370277128328291135983066198132053468740221206832753553905394015932566979329710801450013092090240727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meta-knk.city.urayasu.chiba.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1b442f754142a9bf7969ed490a606c30f612934
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000171073a5dd3000004030046304402203a6a8ff36e76803cb49adbb51050a33331d6c50229150741f2ef76f52c6de2d1022058e557c118a1a0bca2f6f53558b9471d85bd762c0afd2760eb6093c6cab4208c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000171073a5d990000040300473045022100e1c3f168dd628ccef185615bd8ce51491d2c9df3082fb562b7656d9c3851b0c802204a1476c15e4d22e7f8040ac25fdf9659bc9cc546d20b0793233fbce63592d247
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0036ca588fb6bd80b369b0fdf46952ee98908d7e7d5f96538bb8596d3558bfd3aa6d4a97f860181696f2cde81b6c1f7b3901df2acca6dcb17421f35bcdd876b6a4aa65f2b89b6ade43917b336770fcee615aaeba0f329cd03dfa6225f366140559398690b0f51b5745bb0383900c4e573eff80c1ee402ef0e43852a1b0ae7c56cb2b56cf62b01d52bb13345846d424a244145e75358f7dca3c5c1c972a3b925d2d4a5b354083a25ff9087b4171dc1eb9a2d55e8641c34913557330c4d0d74b364712c6b875e4fafb7d3f3eb28860da20024b91a51f22025b6d30c84f2cbf14fa25c94f9a673c43b18a17100dee62dfc63cbd4592b3db8ec84a03ea1fa3cb2c3316