kaishi.jp

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:34:5b:10:d4:6d:b9:f5:07:ae:c4:67:d4:b5:30:ea:10 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kaishi.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:34:5b:10:d4:6d:b9:f5:07:ae:c4:67:d4:b5:30:ea:10
Serial Number (int): 271274639132131780460934186853495810877968
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:8d:e8:a5:08:7f:22:fe:63:f6:31:fa:69:2b:44:9b:e0:31:25:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5f:cd:98:a7:00:8c:63:0a:1c:d7:5f:6c:64:99:3d:39:32:83:05:c2
Fingerprint (sha256): 2a:5a:c6:91:b0:da:5f:39:af:19:d7:96:38:be:88:c9:90:ea:0c:50:32:be:81:df:f6:7d:c8:81:9e:66:b1:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kaishi.jp

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kaishi.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kaishi.jp
karate.kaishi.jp
www.kaishi.jp

Other certificates including the domain name kaishi.jp

(limited to 100 certificates)
music.kaishi.jp
music.kaishi.jp
massimomarra.com
pixxers.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
pixxers.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
kaishi.jp
test.mspek.no
music.kaishi.jp
www.parleebeachlifesavingclub.ca
kaishi.jp
blacksquaremedia.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
app-link.nexquare.io
music.kaishi.jp
supapp.in
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
www.cirklar.org
music.kaishi.jp
music.kaishi.jp
aiobets.com
music.kaishi.jp
retypeproject.com
music.kaishi.jp
music.kaishi.jp
kaishi.jp
app-link.nexquare.io
someoneneeds.abetterdomainna.me
kaishi.jp
music.kaishi.jp
music.kaishi.jp
www.kaishi.jp
criandocomahelo.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
auth.google.agnisdanceplay.com
music.kaishi.jp
music.kaishi.jp
www.runedigital.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
botanycoempresas.es
music.kaishi.jp
www.nompilookyere.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
criandocomahelo.com
starbreeze.12traits.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
www.icgsrl.eu
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp

Certificate

The complete raw certificate details for kaishi.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA149yoTgLZWJ7uePCcmeq
YOfjSKUIiCo5O3Bz9ZfQyqPxdT0wIQjL9X/bL0JrJ8/U5nmN954Rl0jCgC55yCM3
FlY+hStLJVt0eI2nLbLFN/ao5RyPqJ5HaY+L7lEyMwgutdx73ud9r823mLzALEqK
ltF70WxMiEa1IoeeY40FAdKVGXWCcvkEqz40bJb7ckp8PV1GcwVQPFYHV/hDoMbg
z7UXBEesBlwF7kbLDOP+OoIj4YbTDP7TDy6+rWun8vanySb2/ojI6wIdwiUYldqX
3O74CuIcDjmwBajY4sNcsQqwFu1nrK0U4nPUtJ4MCYAcoKWLBNRP05e5OB8xB2Td
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271274639132131780460934186853495810877968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 01:06:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 01:06:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kaishi.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27211972300719235575436384699998662454345812141229990826895581872840591329391116705285191666046208608130722566226982557562022244287964468673767815097066752325645742625532440447118250227351638795416038711850104022542831348961952851879477710983383757631580035089998735285887031895405067332210600840681868405889103967008593274125100520465927947203306196446127093399599214426819290980732823330866403545060468310204312513888131522725714933857722048892621126380488644056858544250215541633294221505218399194512033601388066250487683205256762130735362667633432482484050270632495300658471709395268544068357240296624940743187871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d8de8a5087f22fe63f631fa692b449be031252c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaishi.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karate.kaishi.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaishi.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001703c4bf8240000040300463044022012f2a287d92c1efb1f5d10f5c78dd4e8c286fa92866af3676c434f4033324a0902203fd470824669a6d32141d0af8d0f4e8becd3e092ff63744a8fe4285f8a2d7e86007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001703c4bf811000004030046304402200c1431921c50090d39ab21941a82e5583d69e58ac069c83f1ecb5d6dc9169aa60220702f73caeb7e513e2910b132d9b99e41cf0f98fd77af3f3f5494b2e84b5315b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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