*.nats.tokyo

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 2b:33:3b:47:1f:c1:b2:63:25:d0:bd:d2 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.nats.tokyo,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:33:3b:47:1f:c1:b2:63:25:d0:bd:d2
Serial Number (int): 13369790570747808810108239314
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: fa:e2:c9:03:b6:f6:91:eb:92:e8:9c:14:ff:e4:72:4d:f9:0d:be:15
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): 9b:43:fe:08:a6:eb:ad:b9:43:19:17:2b:68:f7:3f:51:a0:17:db:bc
Fingerprint (sha256): 4c:50:cd:1d:4b:2b:19:30:6a:e2:24:98:c3:9c:73:e9:1b:46:2c:0c:a4:06:9b:4b:da:51:08:1b:02:c6:06:46

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate *.nats.tokyo

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nats.tokyo

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nats.tokyo
nats.tokyo

Other certificates including the domain name nats.tokyo

(limited to 100 certificates)
katou-t.nats.tokyo
mitoyo.nats.tokyo
mitoyo.nats.tokyo
f-eiken.nats.tokyo
green-grace.nats.tokyo
3-r2.nats.tokyo
chita-kougyo.nats.tokyo
m-tsuda.nats.tokyo
itsuki-group.nats.tokyo
s-and-g.nats.tokyo
*.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
*.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
harukarainbow.nats.tokyo
tk-union.nats.tokyo
yusho-co.nats.tokyo
maruhishi.nats.tokyo
hai-f.nats.tokyo
*.nats.tokyo
*.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
sawadatekkin.nats.tokyo
hirano-tire.nats.tokyo
yusho-co.nats.tokyo
usami-kenkou.nats.tokyo
109sai.nats.tokyo
*.nats.tokyo
hayashida-d-s.nats.tokyo
lim-eiya.nats.tokyo
kamakuranozomikai.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
*.nats.tokyo
sawadatekkin.nats.tokyo
boh-chubu.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
nankai-road.nats.tokyo
car-life.nats.tokyo
miyoshikai.nats.tokyo
s-and-g.nats.tokyo
ichiki-setsubi.nats.tokyo
keick.nats.tokyo
pianoservice2.nats.tokyo
3-r2.nats.tokyo
act-sp.nats.tokyo
activeplan.nats.tokyo
f-eiken.nats.tokyo
maedago.nats.tokyo
hanakawah.nats.tokyo
green-grace.nats.tokyo
straight.nats.tokyo
*.nats.tokyo
systems.nats.tokyo
miyoshikai.nats.tokyo
sf092.nats.tokyo
sf092.nats.tokyo
boh-chubu.nats.tokyo
green-grace.nats.tokyo
*.nats.tokyo
towa-k.nats.tokyo
towa-k.nats.tokyo
nanseikikou.nats.tokyo
kaza-design.nats.tokyo
kashiwa-b.nats.tokyo
ando-s.nats.tokyo
zhiservice.nats.tokyo
eco-runner.nats.tokyo
kyushu-ad.nats.tokyo
kaza-design.nats.tokyo
kawasuke.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
yutaka-rr.nats.tokyo
*.nats.tokyo
lim-eiya.nats.tokyo
ast.nats.tokyo
links-c.nats.tokyo
hayashida-d-s.nats.tokyo
nankai-road.nats.tokyo
life-e.nats.tokyo

Certificate

The complete raw certificate details for *.nats.tokyo in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h9bgp9+hBc5btQ1VdJU
6+gaWjy0fQSiSFYwQETDSvVTOA23zEukcau5WL+Ok6u/bcwn9S4FD9PiJUXdkhtU
vFsNFbjeTQTVMaFu/J89Os0bAOin85WmTXupbmPgaQAF1xeVUHgnKHS8VdB43Kfc
WnJdHEKmekLMCF5PfQWjoOSFPd9QK2eOlQERg/XFkppsFTubVRoTxc115H/NyS2O
FQ5IXAU8PvlmMCopLCKEhSl9U5zm7n2D0HvgeVCyPfiTLZ+cqX4ffyvAooPwkV3+
8Ky58fJYg5MfDHakg6m/z1FpuhcTXiwxwK81XskloyKLZrUMRIfhxcmDzh7UlYfI
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13369790570747808810108239314
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-17 07:50:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 07:50:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nats.tokyo'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525506983646488100816020208433890428187306761123036791940965661330628579671638839061473301232246795247510762046610186284114336592744532990219155900177369260907747054913461473461416357383497051134953785285764109468544491079062981507349240051175951412442420928376697205200001045174693565403173365912380970037434777763919424087046416281257952661283212471947834621161781624521738157662506128718625865729345121456581595905991514520726547655517012909748048510631187355846677871680534061646951173856190167200653649066673818793866463912223450269966061164910825911234454140058467651187974978894586554814526281046441169766497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nats.tokyo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nats.tokyo'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fae2c903b6f691eb92e89c14ffe4724df90dbe15
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a8a551b7dd6a524962db67947512f415575c0e165261d9f185553976c8470a5ab86e17a28c7b55f77317f1d462b5315231822c97dce2c53b902848edca5a1483c03895167b2aff861ed28d6cced9d8de12508dc5e062d13355a5548cb5b07d6ff9feeb8d01b164ccd3b8f0c5bfa3fb6089077d13dd9c348de6a61bc0a725138ac7f55c9ae719931fc70d09bd40193e77b31c3e149d21d51ee9159635594a1da08423e2d5258e1a84146761ebf6bb0b0a0959bed4ab9b765a6e485fb5cdd48cdf82ff5ce7d977fb3e7d7f6e6f8eeb916d56f70e36df25897cd69ae888812fb8696fce44496fd714e6dd970947d918da66b0e17679a797304c5cc97991b8a71037