*.nks.co.jp

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:63:ef:24:1e:c7:0a:45:ad:6e:9a:7e:cb:93:0c:bb was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.nks.co.jp

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:63:ef:24:1e:c7:0a:45:ad:6e:9a:7e:cb:93:0c:bb
Serial Number (int): 19128079687618068460356223676450016443
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d3:4d:4e:14:c0:49:f6:cc:de:cd:7e:9c:09:22:8b:3f:0d:aa:00:aa
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): b7:58:ec:69:10:20:90:56:aa:ff:63:b1:40:3d:4f:da:21:a1:94:39
Fingerprint (sha256): 32:19:1e:3b:e8:c7:0d:49:24:41:44:e1:f8:fa:2d:93:03:71:c0:c0:dd:29:8d:3e:51:f0:3f:67:33:e5:3f:ed

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.nks.co.jp

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nks.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nks.co.jp
nikkei-ad.co.jp
*.habita21.com
*.resort.nks.co.jp
nks.co.jp
*.saitamashintoshin.com
*.nikkei-ad.co.jp
saitamashintoshin.com
habita21.com

Other certificates including the domain name nks.co.jp

(limited to 100 certificates)
www.nks.co.jp
www.nks.co.jp
nks.co.jp
*.nks.co.jp
nks.co.jp
*.nks.co.jp
*.nks.co.jp
www.nks.co.jp
www.nks.co.jp
www.nks.co.jp

Certificate

The complete raw certificate details for *.nks.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcMqj/B6UxaApIGpROFe
4BLE3Bep/Ig3cwM8zW+0Ix8cl3D+Q3XD8QahH6ZCYjlbrhfzmuin+Oy2csDuEdVK
x3RS9lJo2EpmkxbBWyYlYFPx0ZMJh2mucY/GSwWzbm2/vIdgrK/2VPUMAUsRQzo1
Gi8wri9Yp0pY1lAeM9pSM2opEOKCZX0Z5kCzauM1k3GPg+wi12WhZgVIZxKHNvX/
mKSZ+y3/UM+M5WR6v8xV1cDDrCJ0dn0BoNYO4LXO85WIqYju8sFKT9afi+dSa392
P4zeruQIWJgurwJkWmuWTcTLTBokz/Noy0eIrFQqGf+kbPKxzMxpQ7IJvNgIxWtb
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19128079687618068460356223676450016443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nks.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24965186147464263968495587317764062814632553572007377924029586168535453037934175771146272218905846869815248799502703867957073778145643560893433182208714550285184210362249532694430281689799984529485326238507972325014004310014587329444735276199962725216108237812063159101155458528577842192890500766714890174412080682145203076782921933891233323168545277382001202016989142446439842162186941559570626521510097546090253119269837079421795754580847340274100792378855732793969824823001083685260317200924825158818507715239695945594728760793186444651330759487545606439867941784338928744874880934901762751896703739102504256494551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d34d4e14c049f6ccdecd7e9c09228b3f0daa00aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nks.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikkei-ad.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habita21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resort.nks.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nks.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saitamashintoshin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikkei-ad.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saitamashintoshin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habita21.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018c753b7e8700000403004730450221009d0f386f352d5fe234df7dc3f8b8fa087c00dae5dbeb13122add05757db6debf0220737d98333a49e891a370c6065ed9bda42c1c9557c5ec2018c4a753a89116f6190075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c753b7e58000004030046304402201b9babb80fcc6d8ba0c0b86201b521e5d2d425605fbbccddd81bd4668cc6c56902206eff69e0a9adf4c54da0befda6976a002af3c22184ee122ce8bb3648d1f2e2050076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018c753b7e430000040300473045022020d3aa16e8a324bc47cf0261276312929935fe23265b211ed157b0a1fd4f8f5a02210089749f07b84de539c085414be8e1f5d5f2699d0c4785f0ee653789850225ab53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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