recruit2018.pepabo.com

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 38:b9:b2:f5:f4:2c:a1:5f:8c:bf:f6:3b was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=recruit2018.pepabo.com,OU=Domain Control Validated,C=JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 38:b9:b2:f5:f4:2c:a1:5f:8c:bf:f6:3b
Serial Number (int): 17555656944904894377581606459
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: aa:c7:6e:3d:68:c0:72:13:46:bb:e5:47:bc:e5:93:15:07:ef:0c:ea
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): a7:a9:32:88:10:43:96:07:8d:ec:8a:a9:db:78:64:cc:b5:22:29:28
Fingerprint (sha256): 20:7f:14:6c:43:a4:7b:f2:36:64:55:e3:b5:1d:20:30:5c:4d:18:d9:28:47:94:5d:9d:f5:e7:f9:80:a5:5a:8a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate recruit2018.pepabo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recruit2018.pepabo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recruit2018.pepabo.com

Other certificates including the domain name pepabo.com

(limited to 100 certificates)
docker.pepabo.com
ci-next.pepabo.com
*.pepabo.com
*.pepabo.com
support.pepabo.com
git.pepabo.com
git.pepabo.com
support.pepabo.com
pepabo.com
daimyo-college.pepabo.com
wimax.pepabo.com
stns.pepabo.com
git.pepabo.com
hr.pepabo.com
stns.pepabo.com
stns.pepabo.com
hosting.pepabo.com
stns.pepabo.com
ci-next.pepabo.com
tech.pepabo.com
support.pepabo.com
pepabo.com
support.pepabo.com
git.pepabo.com
ci-next.pepabo.com
recruit2018.pepabo.com
*.pepabo.com
docker.pepabo.com
stns.pepabo.com
stns.pepabo.com
git.pepabo.com
waker.pepabo.com
download.pepabo.com
git.pepabo.com
recruit.pepabo.com
git.pepabo.com
hosting.pepabo.com
ci-next.pepabo.com
git.pepabo.com
support.pepabo.com
git.pepabo.com
rand.pepabo.com
ci-next.pepabo.com
ci-next.pepabo.com
support.pepabo.com
git.pepabo.com
stns.pepabo.com
ci.pepabo.com
docker.pepabo.com
ci.pepabo.com
hosting.pepabo.com
wimax.pepabo.com
pepabo.com
ci-next.pepabo.com
daimyo-college.pepabo.com
recruit.pepabo.com
ci-next.pepabo.com
recruit.pepabo.com
git-staging.pepabo.com
stns.pepabo.com
hosting.pepabo.com
docker.pepabo.com
waker.pepabo.com
*.pepabo.com
ci-next.pepabo.com
hr.pepabo.com
ci-next.pepabo.com
*.pepabo.com
hr.pepabo.com
docker.pepabo.com
hr.pepabo.com
recruit.pepabo.com
support.pepabo.com
stns.pepabo.com
stns.pepabo.com
support.pepabo.com
*.pepabo.com
recruit.pepabo.com
wimax.pepabo.com
recruit.pepabo.com
ci-next.pepabo.com
pepabo.com
*.pepabo.com
support.pepabo.com
docker.pepabo.com
stns.pepabo.com
stns.pepabo.com
ci-next.pepabo.com
stns.pepabo.com
git.pepabo.com
support.pepabo.com
stns.pepabo.com
daimyo-college.pepabo.com
waker.pepabo.com
ci-next.pepabo.com
hr.pepabo.com
stns.pepabo.com
stns.pepabo.com
git.pepabo.com
hosting.pepabo.com

Certificate

The complete raw certificate details for recruit2018.pepabo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupE/WqkpJtzyb08ZV0n1
YE1Wv35qJNsU0xrcrQJNncGGyjqpudgPinHJG93/bda9x72zi2I/A7jSqEMjNRSY
izIHzTNAXbrvuHBNt24YYdOVzFWGHRjVJ+APUsi3ilAruR58pqdG/nyS0wLwIV6a
nERImWGJsmDXUkZfWBa1QxCLDBfAAJWS3qUP68qPQEQ0Lqs58+GTQWrcUwoMw/6X
vXMQQwFmir+ASNVcTjFm9pbGli6fvAgZ58J20LyK0dnwfwYjz2AmZwA+6yPIjdU9
cWV6IYohYC8BVXljHqPS7vK6Uc9XOvmwEsmqp8IFDKIeisKD3THN6sLGlpaUgzPp
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17555656944904894377581606459
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-19 06:21:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-20 06:21:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recruit2018.pepabo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23551948924127148330404437458533634766596440757799977260182448919434996476658324208739063974753166501251139025150613941235683789450757516684654425360868113158565587984346392438211331955631488750762608378332151963353084338408940518128949430508192167940036515609513294232496531527158494766073718718554532636474516448356417173223927427640769498334771879390719714927516678848016383947691005128480121633265504965637898011402606437882494802419921398178761820827324648473624071501425445176811008769071132431295095328540743411673251271851267134814723832888804212794869108312219981451661250393045855380791225346365397490985431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruit2018.pepabo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aac76e3d68c0721346bbe547bce5931507ef0cea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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