shizuoka.cities.jp

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3c:44:52:36:93:e8:8c:8d:c0:b5:4f:b7:61:f9:4d:0d:de was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shizuoka.cities.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3c:44:52:36:93:e8:8c:8d:c0:b5:4f:b7:61:f9:4d:0d:de
Serial Number (int): 281844614189561450810986045767180933205470
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:5c:a1:21:92:0b:7f:fe:d5:72:62:0d:f9:51:1f:bf:b3:9d:34:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4f:7a:e2:b8:ea:37:1c:ed:c8:c3:75:d1:e2:7d:0f:c3:55:7e:7f:b5
Fingerprint (sha256): 24:61:f0:00:06:e9:b9:2f:e8:b2:06:cc:db:08:9e:be:5b:c5:95:5c:7d:4f:1d:f8:57:d0:ee:33:f0:6e:03:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shizuoka.cities.jp

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shizuoka.cities.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ibaraki.cities.jp
iwate.cities.jp
kanagawa.cities.jp
kochi.cities.jp
shizuoka.cities.jp
www.ibaraki.cities.jp
www.iwate.cities.jp
www.kanagawa.cities.jp
www.kochi.cities.jp
www.shizuoka.cities.jp
www.yamanashi.cities.jp
yamanashi.cities.jp

Other certificates including the domain name cities.jp

(limited to 100 certificates)
yamaguchi.cities.jp
hiroshima.cities.jp
saitama.cities.jp
aomori.cities.jp
fukushima.cities.jp
mall.cities.jp
tokyo.cities.jp
tokyo.cities.jp
kyoto.cities.jp
shimane.cities.jp
miyagi.cities.jp
ibaraki.cities.jp
tokyo.cities.jp
ibaraki.cities.jp
fukuoka.cities.jp
okinawa.cities.jp
gunma.cities.jp
nara.cities.jp
yamaguchi.cities.jp
aomori.cities.jp
nara.cities.jp
shimane.cities.jp
kyoto.cities.jp
tottori.cities.jp
nagasaki.cities.jp
okinawa.cities.jp
shizuoka.cities.jp
kumamoto.cities.jp
chiba.cities.jp
nagasaki.cities.jp
toyama.cities.jp
kagawa.cities.jp
ibaraki.cities.jp
ehime.cities.jp
chiba.cities.jp
miyazaki.cities.jp
tokyo.cities.jp
mall.cities.jp
kumamoto.cities.jp
fukuoka.cities.jp
tottori.cities.jp
oita.cities.jp
fukushima.cities.jp
oita.cities.jp
saitama.cities.jp
oita.cities.jp
mie.cities.jp
chiba.cities.jp
fukuoka.cities.jp
fukuoka.cities.jp
akita.cities.jp
aomori.cities.jp
hokkaido.cities.jp
iwate.cities.jp
yamanashi.cities.jp
saga.cities.jp
mie.cities.jp
okinawa.cities.jp
kumamoto.cities.jp
shizuoka.cities.jp
kyoto.cities.jp
miyagi.cities.jp
cities.jp
niigata.cities.jp
mall.cities.jp
nagasaki.cities.jp
hokkaido.cities.jp
ishikawa.cities.jp
tottori.cities.jp
aichi.cities.jp
hokkaido.cities.jp
ibaraki.cities.jp
cities.jp
hokkaido.cities.jp
gunma.cities.jp
kumamoto.cities.jp
shiga.cities.jp
gifu.cities.jp
shizuoka.cities.jp
hokkaido.cities.jp
tokyo.cities.jp
tottori.cities.jp
shizuoka.cities.jp
miyagi.cities.jp
fukuoka.cities.jp
wakayama.cities.jp
toyama.cities.jp
yamanashi.cities.jp
okinawa.cities.jp
kanagawa.cities.jp
kyoto.cities.jp
iwate.cities.jp
fukuoka.cities.jp
iwate.cities.jp
miyazaki.cities.jp
niigata.cities.jp
aomori.cities.jp
kagawa.cities.jp
akita.cities.jp
yamaguchi.cities.jp

Certificate

The complete raw certificate details for shizuoka.cities.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH7XGgDqW+v/I8Jj37mL
Ln8vX64N1NXaoWB5rhvhA6juQZdlfx1KqAH6RUtGmnYKwXPVJAz9sSwUKA63KIRP
6WOx79P6jUelhl8BXXKxuufn+1V17jHlFkDmy98Puu9UtgUoSHzcryVXdd4isaU9
Urunx1IRYgld/OJlmaumFHNzC2kmIBPQOgjBcnqou6s1kL/QBhcVQLInO+5ymkmU
IowL6klLCWLJiDI64Ftn9TO78Hm/0s7SrW36oxarBy3ADt4FvaKAfRUp9JSAXUx6
kBmG9D5pVr+mI1XswGFHuNZU4c9ny6JQS7i7jp3R+uh6hjFK8aUVLRUr50Q5ZuSi
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281844614189561450810986045767180933205470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 01:53:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 01:53:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shizuoka.cities.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23290395367529721594460922039004744082176632610683950008967393815242692630825434124879252339366198924155649265375646876201284192486621986534512356184000399562456755893741740550274538207471415774905309225435985311483483663500773250930350575667492672384590288618796283614649388626964866195149545138699256735286077597178314233165525265147711977507696993306341829306244252418957981012511752321896653294387025174044008403448632035569940206654606880072488412005047259737815509570590730522929959633559949158259932057953040226656558667090105075842860414103300469943860883592741736744824171665171290093794096038946561981719283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c15ca121920b7ffed572620df9511fbfb39d34d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibaraki.cities.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwate.cities.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanagawa.cities.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kochi.cities.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shizuoka.cities.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibaraki.cities.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwate.cities.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanagawa.cities.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kochi.cities.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shizuoka.cities.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yamanashi.cities.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamanashi.cities.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167583c76850000040300483046022100fc007e4a734bae8e201879179f65cb935d116088f473e10df600444eb8e19ff4022100ce1ea67642773732de45a4feecad48fc95838ebc76495beef1c18e06cf6a1265007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167583c76680000040300473045022043bf4b6b034e44e450077de01d945a0622482d4f250ce96a712ae1c973b824e6022100a5205c629d9673c9a27f6773c091f514a49c4ca304e47854d3f16f05e7d6628c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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