*.okwave.jp

- OKWave -

Issued by Cybertrust Japan Public CA G3

About this certificate

This digital certificate with serial number 18:f7:bd:ad:7d:eb:0e:a6:e3:f0:b6:d2:e6:7f:41:c6:b3:18:af:e4 was issued on by Cybertrust Japan Co., Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

OKWave

Organization: OKWave
Organization unit: System Dept.
State / Province: Tokyo
Locality: Shibuya-ku
Country: JP

Cybertrust Japan Co., Ltd.

Organization: Cybertrust Japan Co., Ltd.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 18:f7:bd:ad:7d:eb:0e:a6:e3:f0:b6:d2:e6:7f:41:c6:b3:18:af:e4
Serial Number (int): 142540585822073778917548866445533313345307324388
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 95:b7:d4:d2:28:92:11:9d:71:b0:5c:8f:e0:b1:e2:17:dd:b5:0b:b8
AuthorityKeyId: 73:a8:08:53:29:b8:15:fb:99:80:e5:c5:37:d8:f8:39:7b:a4:13:06

Fingerprint (sha1): 32:bc:e8:a0:26:4c:f7:77:11:41:0a:b5:aa:53:cf:8b:0f:f1:ca:c4
Fingerprint (sha256): 2b:3d:d8:34:55:b1:5c:6a:68:c9:ff:03:12:1b:d4:83:c1:43:53:02:bf:58:5b:44:f1:b5:da:67:5e:65:ce:a3

Issuing Certificate URL: http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/ctjpubcag3_sha256.crt

Revocation information

OCSP Server: http://ocsp.cybertrust.ne.jp/OcspServer
CRL Distribution Point: http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/cdp.crl

Check the revocation status for certificate *.okwave.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.okwave.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.okwave.jp

Other certificates including the domain name okwave.jp

(limited to 100 certificates)
kenhonda.okwave.jp
okguide.okwave.jp
admin.dev03.gratica.okwave.jp
dev03.gratica.okwave.jp
m.okbiz.okwave.jp
mobile.okwave.jp
admin-test.ai.okbiz.okwave.jp
dev01.gratica.lab.dev.okwave.jp
gazo.okwave.jp
okexperts.okwave.jp
bizcs.stg.aws.okwave.jp
seank.okwave.jp
secure-demo.okbiz.okwave.jp
dev03.gratica.okwave.jp
kenhonda.okwave.jp
*.stg.aws.okwave.jp
kenhonda.okwave.jp
secure.okbiz.okwave.jp
admin.dev03.gratica.okwave.jp
kenhonda.okwave.jp
ok7.okwave.jp
admin.gratica.okwave.jp
dev03.gratica.okwave.jp
cdn.gazo.okwave.jp
dev02.gratica.lab.dev.okwave.jp
*.okwave.jp
secure.okfaq.okwave.jp
gratica.okwave.jp
sso.okbiz.okwave.jp
dev02.gratica.okwave.jp
admin.dev03.gratica.okwave.jp
konmari.okwave.jp
secure-test.okbiz.okwave.jp
service.okwave.jp
dev04.gratica.okwave.jp
secure-test.okbiz.okwave.jp
kw.lab.dev.okwave.jp
secure.webapi.okwave.jp
assets.konmari.okwave.jp
assets.konmari.okwave.jp
ssl3.okwave.jp
dev04.gratica.okwave.jp
*.okwave.jp
okgaia.okwave.jp
admin.dev03.gratica.okwave.jp
konmari.okwave.jp
m.okbiz.okwave.jp
okguide.okwave.jp
okstars.okwave.jp
m.okbiz.okwave.jp
dev03.gratica.okwave.jp
*.okwave.jp
baseball.okwave.jp
secure.okfaq.okwave.jp
oketter.okwave.jp
okauth.okwave.jp
okwave.jp
okwave.jp
mobile.dev.okwave.jp
dev02.gratica.lab.dev.okwave.jp
secure-test.okbiz.okwave.jp
dev03.gratica.okwave.jp
admin.stg02.gratica.okwave.jp
secure.okbiz.okwave.jp
gazo.okwave.jp
okauth.netricoh.okwave.jp
okbizcs.okwave.jp
zatsugaku.okwave.jp
gratica.okwave.jp
ssl2.okwave.jp
*.okwave.jp
dev02.gratica.lab.dev.okwave.jp
okguide.okwave.jp
dev03.gratica.okwave.jp
dev.baseball.okwave.jp
konmari.okwave.jp
secure-test.okbiz.okwave.jp
secure.webapi.okwave.jp
sp.dev.okwave.jp
secure.okbiz.okwave.jp
mobile.okwave.jp
dev01.gratica.lab.dev.okwave.jp
okauth.askdoctors.okwave.jp
dev04.gratica.okwave.jp
*.okwave.jp
dev01.gratica.lab.dev.okwave.jp
dev03.gratica.okwave.jp
stg02.gratica.okwave.jp
sp.dev.okwave.jp
okwave.jp
dev02.gratica.lab.dev.okwave.jp
konmari.okwave.jp
okwave.jp
mobile.okwave.jp
service.okwave.jp
zatsugaku.okwave.jp
staffblog.okwave.jp
dev03.gratica.okwave.jp
dev01.gratica.okwave.jp
service.okwave.jp

Certificate

The complete raw certificate details for *.okwave.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xj308WTRw8IQtJtjnXW
rBgMIUj2ZJxoFZKppBlkIqqpOBzoKLzCD+RdV7obt8MjEoovgVLS5etg4axu9Tfv
ph0eJE7abSk7IMYD/ykewLWenTJwVz03rxg8y2oWjvyDy4VN3pyQy5p0VBkYbp/j
k08s6mg8YAtqXOdXTXCwdZ25k0KrkLFtbzIw3ZCxez8v4Qi7FKCInY8waFT8zzFi
CWgkm7mOtDsVi00LKO+P5ym8w/SldswHPk+yxo6L8Mh3Jd3Ss1zWz+F1rkO0biC4
483Rgk0gXugYoZAbqFvb/fqoU4CfcMv/KGJ4kmE4AiSgr93ZPfIUK6xFZkpHpkN2
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 142540585822073778917548866445533313345307324388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan Public CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-18 11:24:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-18 14:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shibuya-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OKWave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'System Dept.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.okwave.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29173360663889189237186539052743756200743045546893007835002115332668355945764061885404092945194671356118043558766460255608849591256077707358109828893224176983857016558897795272572927389823097027712319457217659537860364130666474513926496186817382861983843813341973554599883411143481537675395525905197448474443120667758859602201498079706775083958759708432520346644976019952915429822046218543894224101812584617844640151611536748119275404235389367250758025638179632614370142651780038986741425264299129758549820980344737722208053192635552102026889407517856913671489170637356938253323922168345038388128979415209385578952221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (176 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200081.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [70 111 114 32 109 111 114 101 32 100 101 116 97 105 108 115 44 32 112 108 101 97 115 101 32 118 105 115 105 116 32 111 117 114 32 119 101 98 115 105 116 101 32 104 116 116 112 115 58 47 47 119 119 119 46 99 121 98 101 114 116 114 117 115 116 46 110 101 46 106 112 32 46]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.cybertrust.ne.jp/ssl/repository/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okwave.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.cybertrust.ne.jp/OcspServer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/ctjpubcag3_sha256.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 73a8085329b815fb9980e5c537d8f8397ba41306
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/cdp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95b7d4d22892119d71b05c8fe0b1e217ddb50bb8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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