sinsa.nttdocomo.co.jp

- NTT DoCoMo, Inc. -

Issued by Cybertrust Japan Public CA G2

About this certificate

This digital certificate with serial number 4b:c2:96:28:48:31:19:01:2a:4a:13:ff:63:af:2e:07:d6:28:d6:fe was issued on by Cybertrust Japan Co., Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

NTT DoCoMo, Inc.

Organization: NTT DoCoMo, Inc.
Organization unit: Information Systems Department
State / Province: Tokyo
Locality: Chiyoda-ku
Country: JP

Cybertrust Japan Co., Ltd.

Organization: Cybertrust Japan Co., Ltd.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:c2:96:28:48:31:19:01:2a:4a:13:ff:63:af:2e:07:d6:28:d6:fe
Serial Number (int): 432513732930446691476617580867762938458610915070
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 9f:d3:52:f3:ab:db:a6:fc:31:b8:ea:64:97:ca:c8:6f:e9:73:b8:2b
Fingerprint (sha256): 26:f7:76:31:60:48:bf:22:dd:39:0b:a2:61:d5:89:01:50:23:09:07:80:7f:60:f1:c4:19:0d:0c:16:53:b5:ae


Revocation information

OCSP Server: http://ocsp.cybertrust.ne.jp/OcspServer
CRL Distribution Point: http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag2/cdp.crl

Check the revocation status for certificate sinsa.nttdocomo.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sinsa.nttdocomo.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sinsa.nttdocomo.co.jp

Other certificates including the domain name nttdocomo.co.jp

(limited to 100 certificates)
dishsfme.is.nttdocomo.co.jp
imodeip20.nttdocomo.co.jp
d-rasvp-pt.asa.nttdocomo.co.jp
dpointat.nttdocomo.co.jp
mss9.asa.nttdocomo.co.jp
charity.nttdocomo.co.jp
hokkaido.nttdocomo.co.jp
exmss9.is.nttdocomo.co.jp
id-credit.com
nes.nttdocomo.co.jp
dishsfmermsnf.is.ntt-finance.co.jp
rms-nttud.ddreams.jp
exmss.is.nttdocomo.co.jp
rms-docomo.is.nttdocomo.co.jp
idc1.tokai.nttdocomo.co.jp
nfq.nttdocomo.co.jp
mail.is.nttdocomo.co.jp
www-te1.eim.nttdocomo.co.jp
www.saitaibbs.kyushu.nttdocomo.co.jp
*.snr.nttdocomo.co.jp
www-te1.eim.nttdocomo.co.jp
mdap.nttdocomo.co.jp
dbg-te1.eim.nttdocomo.co.jp
imodeip20.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
dishvpn0.is.nttdocomo.co.jp
spectest.spec.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
rsqa.idc.nttdocomo.co.jp
www.buskets.nttdocomo.co.jp
iappli.labs.nttdocomo.co.jp
dishsfmermsnd.is.nttdocomo.co.jp
dbg-tw1.eim.nttdocomo.co.jp
site-search.nttdocomo.co.jp
api-dev.hcrm.nttdocomo.co.jp
id-ds.nttdocomo.co.jp
rms-nttrec.ddreams.jp
docomoip.nttdocomo.co.jp
servicearea2.nttdocomo.co.jp
mssn2.asa.nttdocomo.co.jp
rsqad.idc.nttdocomo.co.jp
dbg-hw1.eim.nttdocomo.co.jp
spmodeip.nttdocomo.co.jp
fs.ic.nttdocomo.co.jp
cs.imodeip10.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
spmodeip.nttdocomo.co.jp
laputa.idc.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
d-rasvp.ddreams.jp
*.api.nttdocomo.co.jp
www.buskets.nttdocomo.co.jp
servicearea.nttdocomo.co.jp
dishanp.is.nttdocomo.co.jp
apps.smartphone.nttdocomo.co.jp
www.nttdocomo.co.jp
zcsg-mssmmc10.is.nttdocomo.co.jp
rms-docomo.is.nttdocomo.co.jp
reg.5gbiz.idc.nttdocomo.co.jp
remote.nttdocomo.co.jp
rsqa.idc.nttdocomo.co.jp
enquete.kansai.nttdocomo.co.jp
firm.shien.kansai.nttdocomo.co.jp
fs.ic.nttdocomo.co.jp
imodeip.nttdocomo.co.jp
fs.ic.nttdocomo.co.jp
cs.imodeip10.nttdocomo.co.jp
member.dreport.nttdocomo.co.jp
www.ec-tech.nttdocomo.co.jp
nw-api.nttdocomo.co.jp
*.cms.tz.nttdocomo.co.jp
number.ic.nttdocomo.co.jp
dishsfmerms.is.nttdocomo.co.jp
dbg-tw1.eim.nttdocomo.co.jp
zcpt-mssmmc10.is.nttdocomo.co.jp
www.eim.kas.nttdocomo.co.jp
zcpt-mssmmc10.is.nttdocomo.co.jp
nw-api.nttdocomo.co.jp
prostaff.kyushu.nttdocomo.co.jp
docomoip.nttdocomo.co.jp
d-ras.ddreams.jp
*.tz.nttdocomo.co.jp
mail.is.nttdocomo.co.jp
rms-ntt-finance.ddreams.jp
tmp.spec.nttdocomo.co.jp
ats.mcsys.nttdocomo.co.jp
rms-nttba-g.ddreams.jp
ipspec.nttdocomo.co.jp
www.ob.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
site-search.nttdocomo.co.jp
*.idc.nttdocomo.co.jp
photo.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
www2.eim.kas.nttdocomo.co.jp
sinsa.nttdocomo.co.jp
mss.asa.nttdocomo.co.jp
rsqad.idc.nttdocomo.co.jp
jedi.imodeip3.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp

Certificate

The complete raw certificate details for sinsa.nttdocomo.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/I1nqr2LcoY0SSC/T10
7Tx51Pa/AXu0bpIdbWj1FplhBsTU3fUZvMOE5YqIocJWO2Yiz9hmPsur79MTU6yH
48bi+R+dnOauidcpSB0Mxii1zA24KUc8/TSlR3Wj2MwKJl/DSn68uRaNESkjjaAG
vcxucEudHEwnrRwvYZPcYB5Ek2VMnnEy6V7w/qLLfyOBwV89F5QDBy7yTMQuUL1Y
bQRGKsvD1im3wFACSwv1by/eskswBTMM6SmZkkVnTgdvOUK37rtDiyL5CNVKL/uM
p6lhJjnq5gOyNav1G/LNESsWxYlGM6pEBaX1PkHKg4mqQ+XcPSZ+kGvKUQe+w6Ij
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432513732930446691476617580867762938458610915070
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cybertrust Japan Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cybertrust Japan Public CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-08 04:16:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-22 14:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NTT DoCoMo, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Systems Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sinsa.nttdocomo.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22211141301516284289752865670115799996590094503652547168107251262836067277276384860110682504520470523562834739276929914749076152748780473371499637027565111717850647131534853214795238704754134280809992795879155486514805792224778808339716519840998110598455419244656350623272864317796807208452823591363033203691589253743895066838738052219620800568842758487553354384226978596966500912917526983314055781774418792567741452319243107247980580351628258573523026182957956926788228163635689599635906601143843787250921540469067835423550159826056568847360655002483485357487059769651787136509884040235876850354828086608858695476077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (176 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200081.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [70 111 114 32 109 111 114 101 32 100 101 116 97 105 108 115 44 32 112 108 101 97 115 101 32 118 105 115 105 116 32 111 117 114 32 119 101 98 115 105 116 101 32 104 116 116 112 115 58 47 47 119 119 119 46 99 121 98 101 114 116 114 117 115 116 46 110 101 46 106 112 32 46]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.cybertrust.ne.jp/ssl/repository/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinsa.nttdocomo.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.cybertrust.ne.jp/OcspServer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag2/cdp.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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