www.chori.co.jp

- CHORI CO.,LTD. -

Issued by Cybertrust Japan Public CA G3

About this certificate

This digital certificate with serial number 7b:90:fb:de:32:cb:71:65:1e:d2:43:68:83:50:e0:1c:8e:1a:9b:8d was issued on by Cybertrust Japan Co., Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CHORI CO.,LTD.

Organization: CHORI CO.,LTD.
Organization unit: Human Resources & General Affairs Department
State / Province: Tokyo
Locality: Minato-ku
Country: JP

Cybertrust Japan Co., Ltd.

Organization: Cybertrust Japan Co., Ltd.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:90:fb:de:32:cb:71:65:1e:d2:43:68:83:50:e0:1c:8e:1a:9b:8d
Serial Number (int): 705439112913892735458701765144826472814901631885
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: cc:dc:5e:fc:ba:4b:67:df:fd:bc:55:22:61:71:d1:c8:ff:ca:37:af
AuthorityKeyId: 73:a8:08:53:29:b8:15:fb:99:80:e5:c5:37:d8:f8:39:7b:a4:13:06

Fingerprint (sha1): 99:38:a9:37:d5:90:6d:6c:bd:80:d3:92:18:30:b6:47:dd:90:a5:1f
Fingerprint (sha256): 49:c6:9d:39:90:8c:e6:bf:d2:6b:43:a4:f8:19:c3:1e:e2:1f:e5:c9:a6:50:73:06:c0:b6:97:57:73:2e:31:0f

Issuing Certificate URL: http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/ctjpubcag3_sha256.crt

Revocation information

OCSP Server: http://ocsp.cybertrust.ne.jp/OcspServer
CRL Distribution Point: http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/cdp.crl

Check the revocation status for certificate www.chori.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.chori.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.chori.co.jp

Other certificates including the domain name chori.co.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.chori.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSUYvyJR35c04VpDbXUO
vz6Gw1fy6dKuPn4gsf1v4rpTacW1Zeyld1nEJ+U70U0eUlNxTG+AwZX5qR3Sx7aP
Rw1ATf+Tjf9jLR7emlIdJvedAoEo3qR0kVXElOSM4TbVdQLozZdxu7XUCpFfJ1o1
A1O6/zI363FJ/PeXEIYh1Rx6nYZk/2GyZior3dGOF4k8PtSfUWLYQYPAWFAL5R5U
eaQTKeDWRRlHHg+evzmKPy/Azf5yVlf3UmhT5nsxdQ3wHyBEUDvpVcLn2ITozeAh
KqsANnaRgun+qM3wK0OHKPpjDyzgRcnW3Qr7+4kTlqWvGkBkhbLdh0OWHfqIukXM
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 705439112913892735458701765144826472814901631885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan Public CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 06:41:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-02 14:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minato-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHORI CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Human Resources & General Affairs Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.chori.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22362473027022105915565834870114137979884855575359613895720953838506918403041609873616968165084388722014461627240094656606025810638603864902613777043942260267456380121748106848749366021935705324869013456912665754940777016890275577057447629997375902882507280441756099781474375988262848937303986589218271541948980112837030653301818823260378371641200254943659889740069464658085626867712157986917150896565868715882175606225399257575699194953779802309853289568246107394816110052557704854400717261150591250762843675876350078759592912610982866910396023081130624828980237163966130841304516968167088843491003375657609916173523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200081.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.cybertrust.ne.jp/ssl/repository/index.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chori.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.cybertrust.ne.jp/OcspServer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/ctjpubcag3_sha256.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 73a8085329b815fb9980e5c537d8f8397ba41306
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/cdp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccdc5efcba4b67dffdbc55226171d1c8ffca37af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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