nf-portal-test.ntt-finance.co.jp

- NTT FINANCE CORPORATION -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 11:9f:cd:9b:5a:7c:67:a7:6b:d4:1b:a6 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

NTT FINANCE CORPORATION

Organization: NTT FINANCE CORPORATION
State / Province: Tokyo
Locality: Minato-ku
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 11:9f:cd:9b:5a:7c:67:a7:6b:d4:1b:a6
Serial Number (int): 5454435323176112238640765862
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 83:65:ae:76:df:15:fb:c6:49:26:06:05:ac:07:79:0a:20:b1:7e:73
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 80:7d:bd:da:07:eb:6e:dd:54:3e:dc:2c:ed:4c:2c:85:dc:ac:e7:cb
Fingerprint (sha256): 51:ac:c1:bb:5f:49:02:48:be:eb:b5:db:68:2c:61:8a:09:89:06:20:ed:25:aa:aa:5a:88:fe:57:9f:79:64:a9

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate nf-portal-test.ntt-finance.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nf-portal-test.ntt-finance.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nf-portal-test.ntt-finance.co.jp

Other certificates including the domain name ntt-finance.co.jp

(limited to 100 certificates)
dishsfme.is.nttdocomo.co.jp
inner.ntt-finance.co.jp
cardauth-test.ntt-finance.co.jp
dishsfmermsnf.is.ntt-finance.co.jp
rms-nttud.ddreams.jp
*.ntt-finance.co.jp
nws.ntt-finance.co.jp
mail.is.nttdocomo.co.jp
contact.bill.ntt-finance.co.jp
*.ntt-finance.co.jp
dishsfme.is.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
www.ntt-finance.co.jp
sr-mitts.ntt-finance.co.jp
kaikei.ntt-finance.co.jp
dishsfmermsnd.is.nttdocomo.co.jp
contact.bill.ntt-finance.co.jp
nws.ntt-finance.co.jp
rms-nttrec.ddreams.jp
psw.ntt-finance.co.jp
dishsfme.is.nttdocomo.co.jp
incapsula.com
*.ntt-finance.co.jp
dishsfme.is.nttdocomo.co.jp
www.ntt-finance.co.jp
sr-mitts.ntt-finance.co.jp
bill.ntt-finance.co.jp
sr-mitts.ntt-finance.co.jp
contact.bill.ntt-finance.co.jp
nws.ntt-finance.co.jp
gigacc.ntt-finance.co.jp
www.ntt-finance.co.jp
mail.is.nttdocomo.co.jp
inner.ntt-finance.co.jp
rms-nttba-g.ddreams.jp
dishsfme.is.nttdocomo.co.jp
sr-mitts.ntt-finance.co.jp
dishsfme.is.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
www.ntt-finance.co.jp
rms-nttba-g.ddreams.jp
inner.ntt-finance.co.jp
dishsfmermsnh.hco.ntt.co.jp
m.bill.ntt-finance.co.jp
www.ntt-finance.co.jp
psw.ntt-finance.co.jp
phone.ntt-finance.co.jp
dishsfme.is.nttdocomo.co.jp
www.ntt-finance.co.jp
www.ntt-finance.co.jp
contact.bill.ntt-finance.co.jp
www.ntt-finance.co.jp
inner.ntt-finance.co.jp
gigacc.ntt-finance.co.jp
contact.bill.ntt-finance.co.jp
dishsfme.is.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
bill.ntt-finance.co.jp
*.ntt-finance.co.jp
dishsfmermsnh.hco.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
kaikei.ntt-finance.co.jp
mediaweb-test.ntt-finance.co.jp
dishsfme.is.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
inner.ntt-finance.co.jp
rms-ntt-f-dreams.ddreams.jp
mediaweb.ntt-finance.co.jp
?.ntt-finance.co.jp
cardauth.ntt-finance.co.jp
phone.ntt-finance.co.jp
www.ntt-finance.co.jp
www.ntt-finance.co.jp
sns.ntt-finance.co.jp
sr-mitts-new-test.ntt-finance.co.jp
dishsfme.is.nttdocomo.co.jp
rms-ntt-f-dreams.ddreams.jp
dishsfme.is.nttdocomo.co.jp
web-lease.ntt-finance.co.jp
nf-portal-test.ntt-finance.co.jp
poc-ai3.ntt-finance.co.jp
bill.ntt-finance.co.jp
zcsgbp04.is.nttdocomo.co.jp
mail-m.is.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
lsp.ntt-finance.co.jp
lease-new-test.ntt-finance.co.jp
bill.ntt-finance.co.jp
dishsfme.is.nttdocomo.co.jp
pfmtest.ntt-finance.co.jp
mail.is.nttdocomo.co.jp
mail-m.is.nttdocomo.co.jp
rms-ntt-adgrp.ddreams.jp
lease.ntt-finance.co.jp
sr-mitts.ntt-finance.co.jp
dishsfme.is.nttdocomo.co.jp
web-lease-test.ntt-finance.co.jp
rms-ntt-west-gr.ddreams.jp

Certificate

The complete raw certificate details for nf-portal-test.ntt-finance.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJEcUpl3Z3znZPiiVxia
662y9IHL8bMVEaeQ2tgj17uxO359conJlFgrTuYRMlknfxtLgG2Jfgi2CvlUm2vF
rEBXElsSopiUrC26x/AlqRQIxTjXSD6IYta61iYOgNShDSbfLjMG1dxu8OctdP4d
B9XK+1h91H+YEREdf0DhsiNxRwUZwZbh9ZA04/BLUJ5xQtBDDiIIybq2KTV+syhE
p4Q52qpDQQob08zRlnY/u9XYntnX28hbb11vyTSMhyieNe/LG/GF2zpmxIqSqN/r
3IuvsLR9jHcgnDVgJwUVhn5PKOFCYqaIwmLVX350OF63zUcCJyvv/4EkTHTKCM2m
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5454435323176112238640765862
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 07:42:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-23 07:42:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Minato-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTT FINANCE CORPORATION'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nf-portal-test.ntt-finance.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21279591955553340641098193232258596620951232167033076121083195873828291741846209545693767888573712514186665118290611444642761963002000876896852432491345004272772780672285266992090979792721487550156284162775952868204227532254564541996609580739863232476921816877953818244317850115742278986712675748953780556261339664815208311309885354083779374985327441257330746842845763969564873689342640979370116103527191646783199990679167791178951605635816445091448088239891343529723833309158309097649374778799805987943362098665341119795738981242581632400558715774802183352977649580243475860875639152103144967638891169728192091891299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nf-portal-test.ntt-finance.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8365ae76df15fbc649260605ac07790a20b17e73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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