icm-stg-cymochart.gaikaex.net

- YJFX,Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 51:28:61:0f:bd:d0:8d:3e:00:35:66:9a was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

YJFX,Inc.

Organization: YJFX,Inc.
State / Province: Tokyo
Locality: Chiyoda-ku
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 51:28:61:0f:bd:d0:8d:3e:00:35:66:9a
Serial Number (int): 25117101188241122560679700122
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d8:63:95:2c:66:26:02:fb:0e:d4:26:a7:17:14:8b:f4:06:0e:73:e6
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): c2:52:b7:28:86:51:8e:f3:c4:75:15:ab:7c:5c:3e:de:4c:1b:8e:4d
Fingerprint (sha256): 21:54:03:1f:8c:16:6a:cf:62:8d:50:f0:8e:a4:cb:48:68:d3:80:dc:bb:1b:3f:d4:b6:df:0c:d3:f4:2f:ce:87

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate icm-stg-cymochart.gaikaex.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for icm-stg-cymochart.gaikaex.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

icm-stg-cymochart.gaikaex.net

Other certificates including the domain name gaikaex.net

(limited to 100 certificates)
cymochart.gaikaex.net
d.gaikaex.net
tmbap.gaikaex.net
myfarm.seetree.ai
www.dev-app.askgenie.io
api.gaikaex.net
stg-rate64.gaikaex.net
updcymo.gaikaex.net
stg.gaikaex.net
cymochart.gaikaex.net
updcymo.gaikaex.net
d.gaikaex.net
ipn.gaikaex.net
next.gaikaex.net
dienay.io
gaikaex.net
meadowlarkbozeman.com
staging-env.spreadsheep.io
updcymo.gaikaex.net
stg-updcymo.gaikaex.net
stg-api-web.gaikaex.net
dcymo.gaikaex.net
icm-stg-cymochart.gaikaex.net
gaikaex.net
icm-stg-cymochart.gaikaex.net
gaikaex.net
refcymo.gaikaex.net
gaikaex.net
5ch.tvchan.jp
dcymo.gaikaex.net
static.jexport.ci
fuka-updcymo.gaikaex.net
next.gaikaex.net
gaikaex.net
www.lozalibertas.sk
icm-stg.gaikaex.net
stg-exchart.gaikaex.net
stg.next.gaikaex.net
app.indivdo.com
gaikaex.net
www.deckf.org
refcymo2.gaikaex.net
stg.gaikaex.net
stg-dcymo.gaikaex.net
icm-stg.gaikaex.net
*.gaikaex.net
mbap3.gaikaex.net
api-web.gaikaex.net
dcymo.gaikaex.net
fuka.gaikaex.net
stg.gaikaex.net
stg-api-web.gaikaex.net
gaikaex.net
tmbap.gaikaex.net
apnascrapwala.com
stg-refcymo.gaikaex.net
stg-d.gaikaex.net
d.gaikaex.net
gabeardenpetersen.com
icm-stg.gaikaex.net
heygii.com
www.r-systems.ltd
icm-stg-refcymo.gaikaex.net
henesysstudio.com
dcymo.gaikaex.net
urban.immo
exchart.gaikaex.net
and.gaikaex.net
us.test.atlascrm.avisi-apps.com
stg-dcymo.gaikaex.net
updcymo.gaikaex.net
bantachat.com
tmbap.gaikaex.net
control.balloop.art
refcymo.gaikaex.net
link.skipro.live
isurusranmohotti.tk
mbap.gaikaex.net
api-web.gaikaex.net
d.gaikaex.net
outfit.ml
www.morimori.es
www.queue.lol
actioniq.ideacloud.com
dcymo.gaikaex.net
dcymo.gaikaex.net
tht.gaikaex.net
gaikaex.net
www.ransomweb.dev
stg-refcymo.gaikaex.net
dcymo.gaikaex.net
gaikaex.net
israelblennerhassett.com
adrianandtasyawedding.centurycard.live
gaikaex.net
mbap.gaikaex.net
api.xscript.dev
ipn.gaikaex.net
*.gaikaex.net
stg-refcymo.gaikaex.net

Certificate

The complete raw certificate details for icm-stg-cymochart.gaikaex.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqt9etyssRmWd6dAN0A0
UXY5EbDL3MQpLn8qV70ySU7POwMY9HF0SNC1VJRMfnwcFVlNkVDhy/j6pLV+9Y5I
GAQR0aWKT+b4Cubll0k/W8x5qA1z6nKcIZfNNJCmH4r+WpsA3ckvJttn7tP1WZTN
D1t8AVjeycGD6075jiISMNy7076VxKnOwAfbO6nl7z2bFT9WPRNdoqIYGcgv0JEY
deQoSMBS3XCLzOqJNZbDuLUFr7bR425Uk4ZFXnSB20NG/lAlC/3Y4TfvOSIlrSgW
0Yi1/rCeIG1aVXDTEuhQ/rg5iAWBqS1D6dXRlQTl96QWVrWPoVHV5aceR8pvkMNr
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25117101188241122560679700122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 08:06:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-29 09:11:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'YJFX,Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'icm-stg-cymochart.gaikaex.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24069842891241417726750912080340144614700479948376484989399681369678523751319777700823271120595816729721758269609952213676247558052599934919383526408278450870685574530215988937189530449102771391579656172077882662222380736751904790615579327343081742379873530364716823103629805297168550483580833141961282217289149866970144379367950882769270046665864656253391137323406593426497497204628056262362840562137212649906565827039867477438260972804115288737266492441028483472341104737557560694469443294973896395572168755541443127626982694174183766874494915704374019769307468242315835604594978401897891597213614910671818603064227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icm-stg-cymochart.gaikaex.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d863952c662602fb0ed426a717148bf4060e73e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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