*.yomipo.yomiuri.co.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 07:2e:f2:1f:c6:9b:e9:7c:df:d1:94:d4:bb:30:1d:af was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.yomipo.yomiuri.co.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:2e:f2:1f:c6:9b:e9:7c:df:d1:94:d4:bb:30:1d:af
Serial Number (int): 9548352486650652889257313166670437807
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6f:58:83:a9:4c:df:8c:a6:16:1b:49:86:b3:43:55:18:72:52:c8:f1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ca:21:ab:ab:e3:96:12:e9:cd:68:cb:a1:c0:09:41:a7:4b:f7:1e:20
Fingerprint (sha256): 28:5a:72:fb:31:5d:48:50:ea:b4:b2:6a:5b:a2:e4:48:da:8f:3d:32:90:39:63:98:42:1a:7f:3a:a4:b5:31:7e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.yomipo.yomiuri.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.yomipo.yomiuri.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.yomipo.yomiuri.co.jp
yomipo.yomiuri.co.jp

Other certificates including the domain name yomiuri.co.jp

(limited to 100 certificates)
incapsula.com
katsuji.yomiuri.co.jp
ot.image.yomidr.yomiuri.co.jp
runeslice.com
yorimo.yomiuri.co.jp
genki.yomiuri.co.jp
ybs.yomiuri.co.jp
premium.yomiuri.co.jp
www.waitlyapp.com
my.yomiuri.co.jp
atom.eplus.jp
yorimo.yomiuri.co.jp
ymem-api.yomiuri.co.jp
ot.image.yomidr.yomiuri.co.jp
umsatz.co
global.one.yomiuri.co.jp
areap.yomiuri.co.jp
oksgtk.yomiuri.co.jp
434381.yomiuri.co.jp
kijikensaku.yomiuri.co.jp
ymem.yomiuri.co.jp
yomidr.yomiuri.co.jp
ymem-dev.yomiuri.co.jp
cormeumstaging.byinfinum.co
atom.eplus.jp
komachi-s.yomiuri.co.jp
info.yomiuri.co.jp
beta.startbywgsn.com
incapsula.com
incapsula.com
plus.yomiuri.co.jp
office.viewer.premium.yomiuri.co.jp
ot.image.yomidr.yomiuri.co.jp
incapsula.com
kyoiku.yomiuri.co.jp
info.yomiuri.co.jp
w2.ticket.yorimo.yomiuri.co.jp
w2.ticket.yorimo.yomiuri.co.jp
komachi-s.yomiuri.co.jp
sgtk.yomiuri.co.jp
snif184gl.wpc.edgecastcdn.net
areap.yomiuri.co.jp
ot.image.yomidr.yomiuri.co.jp
www.azu.cash
kyoiku.yomiuri.co.jp
oksgtk.yomiuri.co.jp
incapsula.com
ot.image.yomidr.yomiuri.co.jp
www.yomiuri.co.jp
sgtk.yomiuri.co.jp
ymem.yomiuri.co.jp
ot.image.yomidr.yomiuri.co.jp
form.yomiuri.co.jp
ymem.yomiuri.co.jp
ot.image.yomidr.yomiuri.co.jp
tsumugu.yomiuri.co.jp
imperva.com
www.waitlyapp.com
mov-form.yomiuri.co.jp
www.yomiuri.co.jp
www.yomiuri.co.jp
office.viewer.premium.yomiuri.co.jp
incapsula.com
st-post.yomiuri.co.jp
ybs.yomiuri.co.jp
secure.yomidr.yomiuri.co.jp
incapsula.com
video.emilyandnova.com
www.notesphere.io
sgtk.yomiuri.co.jp
ot.image.yomidr.yomiuri.co.jp
tsumugu-stg.yomiuri.co.jp
www.paichome.com
incapsula.com
m-s.yomiuri.co.jp
ymem-dev.yomiuri.co.jp
bosai.yomiuri.co.jp
plus.yomiuri.co.jp
ymem-sd.yomiuri.co.jp
food.yomiuri.co.jp
kijikensaku.yomiuri.co.jp
plus.yomiuri.co.jp
*.yomipo.yomiuri.co.jp
m-s.yomiuri.co.jp
yab-ot.yomiuri.co.jp
yomipo.yomiuri.co.jp
incapsula.com
buuze.me
ypm.yomiuri.co.jp
komachi-x.yomiuri.co.jp
www.yomiuri.co.jp
imperva.com
www.yomiuri.co.jp
tsumugu.yomiuri.co.jp
atom.eplus.jp
oksgtk.yomiuri.co.jp
md.yomiuri.co.jp
app.indivdo.com
www.ndtetcommunity.lk
ycconfirm.yomiuri.co.jp

Certificate

The complete raw certificate details for *.yomipo.yomiuri.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVo/PlX4sh6GTOFd72I9
E8fcnhCx/zjFpl9PFyoRJaAEZLJ/0SL5AyC382pPW1mXz/DnLzwFFXN/OkHXRn2o
CJH/83f9Y1lDekgklimEDoJcGD0yIzeA5EFnOa308SF46qANUb/4rn4JSYnBdvYE
PsMutsxdcX02ghmQKvYVA+BjPrs9NM1s/+HdB3PjkLHHG10ANaNUYRthtKF38uJM
Oayc5tUEIwyj9V9uR8z5rwxcNGvhyS8BbU7NaU1S0zvkTvrfCiNzq6OXb20tAt6A
OzBdwIZPtEX/WJ5izof7UO+vGu/Wuk137ETbPFWtzPBOZkrXHXHpz0Y7jPhZoQnt
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9548352486650652889257313166670437807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.yomipo.yomiuri.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22893635675336290987621658535127209083446572416475086575030448357741863767397258447351007055025739289610130421943451571892007400937655844005457524192864637513582514483483963783451762765342339880663769072014926348683767748270698441649631151404341239545437087849610324769560226615638978934986274712419975663467496044824212487276956025262914543171945184144488792865656052693843569952350629075060678347460500013753597566852282497233722335771841364716568038961329599219653003942737849030065735038001426988821082947710928894164300917089674555753991208549130775626348806106346083042232969183497401885078805668638039871188423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f5883a94cdf8ca6161b4986b34355187252c8f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yomipo.yomiuri.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yomipo.yomiuri.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016e14dd9e27000004030047304502202b490ebcfa7ae9534b61169d18e3153c9c7bd7772bdd72e407db8c5689ae49ba022100cf7b203a2f6d5c11f73c8dd28ef27c975eb4697700b2eff0e4e05108e1dea30b0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016e14dd9e8500000403004730450221009064ae7e102746b46c586111bd194e5ab3aa2575f85e3b86a55fa35639d52dc60220486ed4510e007e7463c54aea0442cce589fc1b31dec29213c3a97cb2966dc1ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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