okwave.jp

- OKWave -

Issued by SECOM Passport for Web SR 2.0 CA

About this certificate

This digital certificate with serial number 49:cd:8f:46:28:53:ae:63 was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

OKWave

Organization: OKWave
Organization unit: System Dept.
State / Province: Tokyo
Locality: Shibuya-ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 49:cd:8f:46:28:53:ae:63
Serial Number (int): 5318064266481479267
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 9b:7f:16:c1:43:20:20:8c:cc:51:2e:06:e3:be:9b:ec:74:c7:7e:bc
AuthorityKeyId: 30:9a:00:57:99:44:63:6b:c9:b2:f2:3d:8d:83:6b:3b:d7:9d:ef:64

Fingerprint (sha1): f7:3a:29:a7:d0:52:b5:49:6d:c4:72:eb:59:b0:94:0e:b2:52:49:a6
Fingerprint (sha256): 4c:ec:fb:fb:f7:e8:28:74:f4:a5:25:9d:c8:69:14:f5:52:55:9c:45:6b:be:a3:90:e1:d2:85:8a:1f:28:88:2c


Revocation information

OCSP Server: http://sr20.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/spcpp/pfw/pfwsr2ca/fullcrl.crl

Check the revocation status for certificate okwave.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for okwave.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

okwave.jp

Other certificates including the domain name okwave.jp

(limited to 100 certificates)
kenhonda.okwave.jp
okguide.okwave.jp
admin.dev03.gratica.okwave.jp
dev03.gratica.okwave.jp
m.okbiz.okwave.jp
mobile.okwave.jp
admin-test.ai.okbiz.okwave.jp
dev01.gratica.lab.dev.okwave.jp
gazo.okwave.jp
okexperts.okwave.jp
bizcs.stg.aws.okwave.jp
seank.okwave.jp
secure-demo.okbiz.okwave.jp
dev03.gratica.okwave.jp
kenhonda.okwave.jp
*.stg.aws.okwave.jp
kenhonda.okwave.jp
secure.okbiz.okwave.jp
admin.dev03.gratica.okwave.jp
kenhonda.okwave.jp
ok7.okwave.jp
admin.gratica.okwave.jp
dev03.gratica.okwave.jp
cdn.gazo.okwave.jp
dev02.gratica.lab.dev.okwave.jp
*.okwave.jp
secure.okfaq.okwave.jp
gratica.okwave.jp
sso.okbiz.okwave.jp
dev02.gratica.okwave.jp
admin.dev03.gratica.okwave.jp
konmari.okwave.jp
secure-test.okbiz.okwave.jp
service.okwave.jp
dev04.gratica.okwave.jp
secure-test.okbiz.okwave.jp
kw.lab.dev.okwave.jp
secure.webapi.okwave.jp
assets.konmari.okwave.jp
assets.konmari.okwave.jp
ssl3.okwave.jp
dev04.gratica.okwave.jp
*.okwave.jp
okgaia.okwave.jp
admin.dev03.gratica.okwave.jp
konmari.okwave.jp
m.okbiz.okwave.jp
okguide.okwave.jp
okstars.okwave.jp
m.okbiz.okwave.jp
dev03.gratica.okwave.jp
*.okwave.jp
baseball.okwave.jp
secure.okfaq.okwave.jp
oketter.okwave.jp
okauth.okwave.jp
okwave.jp
okwave.jp
mobile.dev.okwave.jp
dev02.gratica.lab.dev.okwave.jp
secure-test.okbiz.okwave.jp
dev03.gratica.okwave.jp
admin.stg02.gratica.okwave.jp
secure.okbiz.okwave.jp
gazo.okwave.jp
okauth.netricoh.okwave.jp
okbizcs.okwave.jp
zatsugaku.okwave.jp
gratica.okwave.jp
ssl2.okwave.jp
*.okwave.jp
dev02.gratica.lab.dev.okwave.jp
okguide.okwave.jp
dev03.gratica.okwave.jp
dev.baseball.okwave.jp
konmari.okwave.jp
secure-test.okbiz.okwave.jp
secure.webapi.okwave.jp
sp.dev.okwave.jp
secure.okbiz.okwave.jp
mobile.okwave.jp
dev01.gratica.lab.dev.okwave.jp
okauth.askdoctors.okwave.jp
dev04.gratica.okwave.jp
*.okwave.jp
dev01.gratica.lab.dev.okwave.jp
dev03.gratica.okwave.jp
stg02.gratica.okwave.jp
sp.dev.okwave.jp
okwave.jp
dev02.gratica.lab.dev.okwave.jp
konmari.okwave.jp
okwave.jp
mobile.okwave.jp
service.okwave.jp
zatsugaku.okwave.jp
staffblog.okwave.jp
dev03.gratica.okwave.jp
dev01.gratica.okwave.jp
service.okwave.jp

Certificate

The complete raw certificate details for okwave.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sfarewJ7WLIqeJjR/ed
6cfWpjydb06g59VMN2265H+xrqtbsutRvxI3Z5GtN5FoZBzJrpARN56B0MlAjm7Y
+AItEdW7BNiKLDeH9N8V/qAfVnTxytDenCtoI6IOxjzxLEdbktwbtH0Ssr/F5n9m
Zk2+R/Ao5gtyAztPynoAoaF7Ws6rfMpqlDJagqOrgJq/U0HieD/clsuZBlHAIB0Q
rJ3QAGYyd3IOuP9YeqGBdTP/KPgEY83O53Tr3UD4e2bwtwZhiDGbJ4OCmyQHjIFS
wHk8t9Cr/2L3X6WoaDmAVSf0TRg5aUAMU93O/82rzkuOVwuSgKDZHxDfBvgLnj/9
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5318064266481479267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Passport for Web SR 2.0 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-11 11:00:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shibuya-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OKWave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'System Dept.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'okwave.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28123455489617437564196063749841257205711781914512918420387654489478982429427755218608676293010414960978380412268373815820772525215890251550791648763721616971093539449025269330860226600952420797102060823241575973694479783141683635873058924533672769417586633750881743052891118891728515109941060407947768501506782280598375691317386317257069080200558873387749280821627858911624316281685286677041598987096543155501133942444821119694062737676844400768693843321316676457423554095979030536137919943861207893308031040037349901592403022897182140188007696283806824682659294279065286513561633745051500922393504992238839147789587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b7f16c14320208ccc512e06e3be9bec74c77ebc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 309a00579944636bc9b2f23d8d836b3bd79def64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okwave.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.100.741.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/spcpp/pfw/pfwsr2ca/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/spcpp/pfw/pfwsr2ca/fullcrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr20.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							0640
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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