assets.konmari.okwave.jp

- OKWave -

Issued by SECOM Passport for Web SR 2.0 CA

About this certificate

This digital certificate with serial number 02:86:46:1e:61:31:05:55 was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

OKWave

Organization: OKWave
Organization unit: System Dept.
State / Province: Tokyo
Locality: Shibuya-ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 02:86:46:1e:61:31:05:55
Serial Number (int): 181909931248649557
Serial Number lenght: 58 bits, 8 octets

SubjectKeyId: ed:2c:aa:03:f8:2b:56:b7:e5:81:12:1f:bb:b8:b9:2b:02:f1:8f:4b
AuthorityKeyId: 30:9a:00:57:99:44:63:6b:c9:b2:f2:3d:8d:83:6b:3b:d7:9d:ef:64

Fingerprint (sha1): 39:c0:8b:39:6d:5a:39:e7:14:f7:be:cb:c4:6d:e7:ec:ba:5e:8f:49
Fingerprint (sha256): 25:d0:98:75:e1:0e:18:75:81:42:70:68:02:06:6c:fe:10:5e:77:5f:6e:db:27:35:59:58:4f:a2:b8:78:d8:82


Revocation information

OCSP Server: http://sr20.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/spcpp/pfw/pfwsr2ca/fullcrl.crl

Check the revocation status for certificate assets.konmari.okwave.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.konmari.okwave.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.konmari.okwave.jp

Other certificates including the domain name okwave.jp

(limited to 100 certificates)
kenhonda.okwave.jp
okguide.okwave.jp
admin.dev03.gratica.okwave.jp
dev03.gratica.okwave.jp
m.okbiz.okwave.jp
mobile.okwave.jp
admin-test.ai.okbiz.okwave.jp
dev01.gratica.lab.dev.okwave.jp
gazo.okwave.jp
okexperts.okwave.jp
bizcs.stg.aws.okwave.jp
seank.okwave.jp
secure-demo.okbiz.okwave.jp
dev03.gratica.okwave.jp
kenhonda.okwave.jp
*.stg.aws.okwave.jp
kenhonda.okwave.jp
secure.okbiz.okwave.jp
admin.dev03.gratica.okwave.jp
kenhonda.okwave.jp
ok7.okwave.jp
admin.gratica.okwave.jp
dev03.gratica.okwave.jp
cdn.gazo.okwave.jp
dev02.gratica.lab.dev.okwave.jp
*.okwave.jp
secure.okfaq.okwave.jp
gratica.okwave.jp
sso.okbiz.okwave.jp
dev02.gratica.okwave.jp
admin.dev03.gratica.okwave.jp
konmari.okwave.jp
secure-test.okbiz.okwave.jp
service.okwave.jp
dev04.gratica.okwave.jp
secure-test.okbiz.okwave.jp
kw.lab.dev.okwave.jp
secure.webapi.okwave.jp
assets.konmari.okwave.jp
assets.konmari.okwave.jp
ssl3.okwave.jp
dev04.gratica.okwave.jp
*.okwave.jp
okgaia.okwave.jp
admin.dev03.gratica.okwave.jp
konmari.okwave.jp
m.okbiz.okwave.jp
okguide.okwave.jp
okstars.okwave.jp
m.okbiz.okwave.jp
dev03.gratica.okwave.jp
*.okwave.jp
baseball.okwave.jp
secure.okfaq.okwave.jp
oketter.okwave.jp
okauth.okwave.jp
okwave.jp
okwave.jp
mobile.dev.okwave.jp
dev02.gratica.lab.dev.okwave.jp
secure-test.okbiz.okwave.jp
dev03.gratica.okwave.jp
admin.stg02.gratica.okwave.jp
secure.okbiz.okwave.jp
gazo.okwave.jp
okauth.netricoh.okwave.jp
okbizcs.okwave.jp
zatsugaku.okwave.jp
gratica.okwave.jp
ssl2.okwave.jp
*.okwave.jp
dev02.gratica.lab.dev.okwave.jp
okguide.okwave.jp
dev03.gratica.okwave.jp
dev.baseball.okwave.jp
konmari.okwave.jp
secure-test.okbiz.okwave.jp
secure.webapi.okwave.jp
sp.dev.okwave.jp
secure.okbiz.okwave.jp
mobile.okwave.jp
dev01.gratica.lab.dev.okwave.jp
okauth.askdoctors.okwave.jp
dev04.gratica.okwave.jp
*.okwave.jp
dev01.gratica.lab.dev.okwave.jp
dev03.gratica.okwave.jp
stg02.gratica.okwave.jp
sp.dev.okwave.jp
okwave.jp
dev02.gratica.lab.dev.okwave.jp
konmari.okwave.jp
okwave.jp
mobile.okwave.jp
service.okwave.jp
zatsugaku.okwave.jp
staffblog.okwave.jp
dev03.gratica.okwave.jp
dev01.gratica.okwave.jp
service.okwave.jp

Certificate

The complete raw certificate details for assets.konmari.okwave.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZIwlGQsHrx5wcsYOKCc
4xxlFyYa+DFdXJM7Wy90tChOlfMn+5Dg0iRepH+1WLHz/PVG44DqnFgS0y5wRhMj
pM1rrYeCvBb1CGM85rmZqvJObyLlUPC/s6TEOWITEUOb6IU/ccHNh+B+rj/ziJ6v
j0zqhBZ7wQfjeeW3H3LKAW4sVwuW7UI0uWMyE0gxN75mLQFk1OYYEPxemVSisz3c
Fr4y7i1ef6vMnAZtFX8Ft4nwT3l5xeitAuOca7RFzh9B+AWS5cYR5061lma7iM8+
vq5hyXzw9qTZs8WASEVtN/nSUYe65n3pYLecxv7oKNWLqlyio66AI6xJ+3gVoMqM
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 181909931248649557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Passport for Web SR 2.0 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-16 03:10:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-02 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shibuya-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OKWave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'System Dept.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.konmari.okwave.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23426175278271720663251527791026827810630689903055102831235340170212078621542385727872482367692581613227655724624858087888871108602571360710935255040574865714850054528644358373543970036673071509991134209519343624505136706173585495825096835148418791406175995545121864952599415011166111632813309749993900264694017509731827618355922413313699851560917826493751904173217760815054684156081478278796390792894648916366999878654709324158271801323711727599795965926737373281479897777426328484892073592286000783630732367969093639970674025016568140418283156305684457838563495576297263303914433611533260238702164554058174365863149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed2caa03f82b56b7e581121fbbb8b92b02f18f4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 309a00579944636bc9b2f23d8d836b3bd79def64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.konmari.okwave.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.100.741.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/spcpp/pfw/pfwsr2ca/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/spcpp/pfw/pfwsr2ca/fullcrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr20.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							0640
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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