www.itimes.co.jp
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:72:04:ab:9d:97:ae:5d:09:15:7d:0c:17:d0:f5:44:56:62 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.itimes.co.jp
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:72:04:ab:9d:97:ae:5d:09:15:7d:0c:17:d0:f5:44:56:62Serial Number (int): 300135255615369397071386498011263333062242
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b1:f2:8a:cc:f2:a7:96:90:7d:d6:37:c0:d6:d1:f0:e9:d9:2e:eb:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1e:49:a5:11:53:84:32:70:cf:2f:e1:63:fe:a5:ee:f8:cc:1a:a0:d1
Fingerprint (sha256): 34:f7:af:5d:50:fb:94:22:66:39:fd:9a:c9:c5:4b:38:04:df:dd:26:75:c9:85:8a:dd:ad:a0:d8:e6:08:27:b3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.itimes.co.jp
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.itimes.co.jp
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.itimes.co.jp
Other certificates including the domain name itimes.co.jp
(limited to 100 certificates)
www.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
mmn.itimes.co.jp
www.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
aipo.itimes.co.jp
loc.itimes.co.jp
www.itimes.co.jp
www.itimes.co.jp
mng.itimes.co.jp
www.itimes.co.jp
aipo.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
own.itimes.co.jp
loc.itimes.co.jp
www.itimes.co.jp
www.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
loc.itimes.co.jp
aipo.itimes.co.jp
aipo.itimes.co.jp
loc.itimes.co.jp
aipo.itimes.co.jp
aipo.itimes.co.jp
mmn.itimes.co.jp
www.itimes.co.jp
alf.itimes.co.jp
aipo.itimes.co.jp
aipo.itimes.co.jp
life.itimes.co.jp
mng.itimes.co.jp
aipo.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
alf.itimes.co.jp
www.itimes.co.jp
own.itimes.co.jp
www.itimes.co.jp
aipo.itimes.co.jp
loc.itimes.co.jp
aipo.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
loc.itimes.co.jp
www.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
alf.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
mmn.itimes.co.jp
www.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
aipo.itimes.co.jp
loc.itimes.co.jp
www.itimes.co.jp
www.itimes.co.jp
mng.itimes.co.jp
www.itimes.co.jp
aipo.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
own.itimes.co.jp
loc.itimes.co.jp
www.itimes.co.jp
www.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
loc.itimes.co.jp
aipo.itimes.co.jp
aipo.itimes.co.jp
loc.itimes.co.jp
aipo.itimes.co.jp
aipo.itimes.co.jp
mmn.itimes.co.jp
www.itimes.co.jp
alf.itimes.co.jp
aipo.itimes.co.jp
aipo.itimes.co.jp
life.itimes.co.jp
mng.itimes.co.jp
aipo.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
alf.itimes.co.jp
www.itimes.co.jp
own.itimes.co.jp
www.itimes.co.jp
aipo.itimes.co.jp
loc.itimes.co.jp
aipo.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
loc.itimes.co.jp
www.itimes.co.jp
aipo.itimes.co.jp
www.itimes.co.jp
alf.itimes.co.jp
Certificate
The complete raw certificate details for www.itimes.co.jp in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISA3IEq52Xrl0JFX0MF9D1RFZiMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDEwNDQzMjVaFw0x OTA4MzAwNDQzMjVaMBsxGTAXBgNVBAMTEHd3dy5pdGltZXMuY28uanAwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKRh/Sd4uEh+norhFXgSs3tcJk4dki upml0NwPvHjN2h+x1lz/nnbZAmQRv7sWJ9bx6jRcHxo2SV6uJTmmBy/eCNBNlcfo ABk36ZQJ/Wm4tIMhASjGo94qIvQAziQsAgRWe11NeF9JAXsUFmzWgodntggWsOaI iZtYZFgY/AcHAAdJtuEK2JnrtOAIeHfmaShx7aLbsYpSzWseR+mC8+MoOn1ZE2xK bh33NN5Vi2uZ/f4RWhUY7+8TSPLElvoFYmKFzunsOD1yH83cmXqhe5PEynfTvJe7 76pwCa9BNt26D4dKkIH9SP9A63nrT9+SGhsQ4kaSKAgJxYhE/DivbtEXAgMBAAGj ggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLHyiszyp5aQfdY3wNbR8OnZ LuuBMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wGwYDVR0RBBQwEoIQd3d3Lml0aW1lcy5jby5qcDBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AG9Tdqwx 8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABaxGQbJ8AAAQDAEcwRQIgHTPC SlDG8pSQwEIl6ggqLkqTr5bXrUhfSZhqLpO/3J0CIQDfbaXIpgBt0ZhVm+q7KNwz cc36V69sKiCCvNVyqKW6oAB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hU S9iNAAABaxGQbAYAAAQDAEcwRQIhAPCMZiPpprq0m7r5R0lTj46wzvAzI5KVyfUh ZZFHnaRvAiA7PsGipY8iyY53+D6tl9BkQuROfOEbKPRqc6JcxV7O7DANBgkqhkiG 9w0BAQsFAAOCAQEAg9GfOZXYgrVbrY1OmIgOkWpQCzY7y0S2kYhb/AyfQnn4M5hw vwltM/y0CBQ/ab5r8hQH6Bi7IswcOAKvsrfUeyvL7ip5LHCHlJMpzwkWzkQbJsdG hOotAKk0dsDvnfbVikRABOUiI8TMMatsCURk97C+S1m7+YaULFFjZpXPcsnShw/b zgM+ocZK2uTNdj10xvhMOHd+hDl4Ms6KFnRq8CealaxctH9SYlEmC4dJVguChFD8 0oX8AiAdlhVTCZVjiAXaFKsShfGpijvtWMo78lPwWW4GntNzfY3wHQcR8m/z2U17 ApliXAT7kJRldv3D/A3bWrgl4alKiS/Dzi8xOg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykYf0neLhIfp6K4RV4Er N7XCZOHZIrqZpdDcD7x4zdofsdZc/5522QJkEb+7FifW8eo0XB8aNkleriU5pgcv 3gjQTZXH6AAZN+mUCf1puLSDIQEoxqPeKiL0AM4kLAIEVntdTXhfSQF7FBZs1oKH Z7YIFrDmiImbWGRYGPwHBwAHSbbhCtiZ67TgCHh35mkoce2i27GKUs1rHkfpgvPj KDp9WRNsSm4d9zTeVYtrmf3+EVoVGO/vE0jyxJb6BWJihc7p7Dg9ch/N3Jl6oXuT xMp307yXu++qcAmvQTbdug+HSpCB/Uj/QOt560/fkhobEOJGkigICcWIRPw4r27R FwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 300135255615369397071386498011263333062242 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-01 04:43:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 04:43:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.itimes.co.jp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25534717186847119937133344469756911132027225793236718749127304144617844272048397211263466745366523889948138623073903141535942423722661183938871592049980416473382762128827183012866505709100405134303237712407226334985614818772839731940625304742231564804394360507548533887675874864323099465828812440411676655993730716662568180798909079133936479601230044379556450971217060296227680640446123674532496814297797870784053100649880998368118444169865840229225634065901465095467043410386004314486562197069780316163775327111746022324040811185284760609980928684740902826852655047516554900756804602915381711118365184401535593795863 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b1f28accf2a796907dd637c0d6d1f0e9d92eeb81 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itimes.co.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b11906c9f000004030047304502201d33c24a50c6f29490c04225ea082a2e4a93af96d7ad485f49986a2e93bfdc9d022100df6da5c8a6006dd198559beabb28dc3371cdfa57af6c2a2082bcd572a8a5baa000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b11906c060000040300473045022100f08c6623e9a6bab49bbaf94749538f8eb0cef033239295c9f5216591479da46f02203b3ec1a2a58f22c98e77f83ead97d06442e44e7ce11b28f46a73a25cc55eceec . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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