bi.aws.nichigas.co.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:a3:f1:70:6d:97:3a:68:dc:f7:73:b9:79:e9:40:ee was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bi.aws.nichigas.co.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:a3:f1:70:6d:97:3a:68:dc:f7:73:b9:79:e9:40:ee
Serial Number (int): 16801977305545538729402271239150059758
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8d:0c:ec:00:38:bf:5f:5c:bd:e8:46:e8:29:aa:ce:77:79:54:9f:b0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 3c:74:a5:4f:c2:fc:e0:75:c0:f8:5a:bd:9d:87:25:b1:32:3a:8a:d4
Fingerprint (sha256): 21:ec:91:8e:37:0f:53:98:65:f5:6c:7a:90:4d:78:6b:a7:b0:ed:74:05:6c:46:1b:43:ce:43:0c:bf:9b:89:66

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate bi.aws.nichigas.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bi.aws.nichigas.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bi.aws.nichigas.co.jp
*.bi.aws.nichigas.co.jp

Other certificates including the domain name nichigas.co.jp

(limited to 100 certificates)
retail.threet.electricity.aws.nichigas.co.jp
callback.tea.nichigas.co.jp
retail.electricity.aws.nichigas.co.jp
*.map.ops.nichigas.co.jp
koji.nichigas.co.jp
*.ops.nichigas.co.jp
zabbix.back.tea.nichigas.co.jp
*.oss.nichigas.co.jp
pint.cloud.back.tea.nichigas.co.jp
*.internal-apigw.nichigas.co.jp
erex.cloud.back.tea.nichigas.co.jp
bi.aws.nichigas.co.jp
*.covid19.eip.nichigas.co.jp
*.ops.nichigas.co.jp
*.postcode.nichigas.co.jp
*.dev.nichigas.co.jp
*.oni.nichigas.co.jp
*.internal-apigw.nichigas.co.jp
fnj2.cloud.back.tea.nichigas.co.jp
payment-converter.aws.nichigas.co.jp
log.back.tea.nichigas.co.jp
*.stg.nichigas.co.jp
campaign.nichigas.co.jp
*.nbs.nichigas.co.jp
n12h.oni.nichigas.co.jp
fnj.vpn.retail.tea.nichigas.co.jp
htb.cloud.back.tea.nichigas.co.jp
manage.aws.nichigas.co.jp
www.nichigas.co.jp
bi.aws.nichigas.co.jp
*.dev.nichigas.co.jp
*.ops.nichigas.co.jp
weborder.nichigas.co.jp
order.electricity.aws.nichigas.co.jp
aggregation.aws.nichigas.co.jp
*.oni.nichigas.co.jp
lp.myapp.stg.nichigas.co.jp
emi.cloud.back.tea.nichigas.co.jp
postcode.nichigas.co.jp
api.dps.nichigas.co.jp
weborder.tea.nichigas.co.jp
framgia.retail.threet.electricity.aws.nichigas.co.jp
api.private.nichigas.co.jp
framgia.retail.electricity.aws.nichigas.co.jp
login.nichigas.co.jp
nte.cloud.back.tea.nichigas.co.jp
campaign.nichigas.co.jp
www.nichigas.co.jp
erex.cloud.back.tea.nichigas.co.jp
framgia.retail.electricity.aws.nichigas.co.jp
campaign.nichigas.co.jp
weborder.nichigas.co.jp
*.nichigas.co.jp
tki.cloud.back.tea.nichigas.co.jp
*.uxp-int.nf.nichigas.co.jp
weborder.nichigas.co.jp
campaign.nichigas.co.jp
recall.nichigas.co.jp
retail.threet.electricity.aws.nichigas.co.jp
*.gasappliance.nichigas.co.jp
cmn.cloud.back.tea.nichigas.co.jp
*.citygas.nichigas.co.jp
retail.tea.nichigas.co.jp
api.private.nichigas.co.jp
fbit.cloud.back.tea.nichigas.co.jp
recall.nichigas.co.jp
www.weborder.nichigas.co.jp
fnj.vpn.cloud.back.tea.nichigas.co.jp
www.nichigas.co.jp
payment-converter.aws.nichigas.co.jp
cis.nichigas.co.jp
*.voucher.nichigas.co.jp
*.cis.nichigas.co.jp
pay.nichigas.co.jp
aggregation.aws.nichigas.co.jp
citygas.nichigas.co.jp
chuod.cloud.back.tea.nichigas.co.jp
cis.nichigas.co.jp
campaign.nichigas.co.jp
pint.cloud.back.tea.nichigas.co.jp
*.stg.nichigas.co.jp
emi.cloud.back.tea.nichigas.co.jp
*.stg.nichigas.co.jp
my.nichigas.co.jp
*.n12h.oni.nichigas.co.jp
fnj.cloud.back.tea.nichigas.co.jp
xoomenergy.cloud.back.tea.nichigas.co.jp
retail.electricity.aws.nichigas.co.jp
xoomenergy.cloud.back.tea.nichigas.co.jp
manage.aws.nichigas.co.jp
login.nichigas.co.jp
fnj.vpn.retail.tea.nichigas.co.jp
recall.nichigas.co.jp
*.nf.nichigas.co.jp
ict-covid19.eip.nichigas.co.jp
lp.my.stg.nichigas.co.jp
fbit.cloud.back.tea.nichigas.co.jp
*.ops.nichigas.co.jp
weborder.nichigas.co.jp
*.apigw.nichigas.co.jp

Certificate

The complete raw certificate details for bi.aws.nichigas.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7T+AWqe7r6YYK8mPlKqQ
oTKjtv/TwjGCrFysV+z9OosCvGQXJ4ifMw7ly5x7TgamXn88GaQyOV6o4lbyVgxj
Uek8ybFbrCJiR51ohi7tpESULJzbZzrsaLMtlrGgnpZBuFhu+08YYoGGm3otK6RJ
82YVahk9xbGN9+GikEijlZqdqDouEEP8lp4D23rYPHTQSALACQ+K0AhU5tD9wtQ9
ih0xLUcFqy9LcguLkvIi+7Vcmm3BbBVR8SH+VfiBEw4jvGGRA/mHYLysSsj0PjXy
DsC9BKEBu7Ea+IDCKY4CaByzE/V/Ky3oRZ8tqoqWLgFlx1b64rBofIIsCjEH3ueV
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16801977305545538729402271239150059758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bi.aws.nichigas.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29949791976133097678294407989456967739102142451227596326565940858641012503063024070617692938252887819076304678928850538197677873637186362175446986645007866219543977006276572646582689546935900910539457105068915554217586319697820369769558675875251639379961722200673176781853710851398997556428362811363909371888827760631922622494156040998968012195142630616002268797213265268520738560951406221224685819991268950577314062068204377332827830782087166475082253541585300826403377467672018708153613304197091878154360993538876058918189167840524599004296036777090135416049979513413299743428919796825948773378859605131101930493209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d0cec0038bf5f5cbde846e829aace7779549fb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.aws.nichigas.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bi.aws.nichigas.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001684ede177f0000040300473045022100cc1d6ab13e9bf61ab2f61617d8cddfd50fee146fb1d562be23048949b3e638b6022013c43ab3ce4f676d77e46c309b062340d71733812036e505eba09ac5e47920dc0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001684ede184500000403004630440220366e5f17c29f3fe1bee718470daefce58e4f0a5eed51f7246dcd72015c447b1e022069f692d344c0b1d8224437c97415b4d634e9e4727a195db63aca25f8501a1cd2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00185de94897002bc27c0bc870d63e1c8c7fb6454a6db24f3a74c41c9e3c5f578fda8c7da5c0cbe92dedf1732cda1ebffbfbb1738e895d52407fd379adc95ecbdb5dac00048a8d57a52098343ebe03461facc375fa1af333f47e0d8289a1d57b914a6ee166984fbbccefaa7321330d29be6821e55993ca8d19c8a05a3ae9b7f77ed5851abf56979b822c44d7586a05ea30d756c6c702104b1f72d3199fb25129b9bf4917f7fb68afad77317074b09ff773b880d243c25019f55428f4d3844663fcafeb9d49fd0941fa7d44311b825094fcc17b87d9a681cf0e3f57ab7f7d004d95626dc9b5553841911215565dd4ac0c030861c92d921d8b32b4d310a862292be1