oma-ia.sanrio.co.jp

- Sanrio Company, Ltd. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 02:2d:9d:8a:f0:99:0e:c1:64:9f:d5:a6 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sanrio Company, Ltd.

Organization: Sanrio Company, Ltd.
Organization unit: It
State / Province: TOKYO
Locality: SHINAGAWA-KU
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 02:2d:9d:8a:f0:99:0e:c1:64:9f:d5:a6
Serial Number (int): 674115656050745620847121830
Serial Number lenght: 90 bits, 12 octets

SubjectKeyId: a9:e8:bc:01:ba:a2:f2:ab:9e:37:d4:12:f9:d2:35:54:ff:a9:3f:de
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): a9:77:a4:be:10:53:d6:c4:13:b9:b1:09:94:ef:36:7e:f4:c8:0e:53
Fingerprint (sha256): 52:02:55:60:dc:46:2f:7a:37:75:ee:4f:05:5f:e1:8c:3e:6a:4d:0c:25:6c:92:1e:08:5c:2d:c4:84:50:ec:37

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate oma-ia.sanrio.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oma-ia.sanrio.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oma-ia.sanrio.co.jp

Other certificates including the domain name sanrio.co.jp

(limited to 100 certificates)
pages.friends.sanrio.co.jp
akamai-san10.exacttarget.com
ec-stg.sanrio.co.jp
akamai-san10.exacttarget.com
akamai-san10.exacttarget.com
www.sanrio.co.jp
akamai-san10.exacttarget.com
shared-certificate.user-space.cdn.idcfcloud.net
locations.corelifeeatery.com
sanrio.co.jp
akamai-san10.exacttarget.com
shared-certificate.user-space.cdn.idcfcloud.net
www.sanrio.co.jp
oma-ia.sanrio.co.jp
plus.sanrio.co.jp
www.sanrio.co.jp
akamai-san10.exacttarget.com
stores.tesco.com.pagescdn.com
search.sanrio.co.jp
english.sanrio.co.jp
license.sanrio.co.jp
shop.sanrio.co.jp
shared-certificate.user-space.cdn.idcfcloud.net
shared-certificate.user-space.cdn.idcfcloud.net
shared-certificate.user-space.cdn.idcfcloud.net
ranking.sanrio.co.jp
corporate.sanrio.co.jp
www.sanrio.co.jp
adfs.sanrio.co.jp
akamai-san10.exacttarget.com
ec-stg.sanrio.co.jp
click.friends.sanrio.co.jp
www.sanrio.co.jp
stores.sanrio.co.jp
akamai-san10.exacttarget.com
pub.friends.sanrio.co.jp
faq.sanrio.co.jp
ec-stg.sanrio.co.jp
akamai-san10.exacttarget.com
oma-ia.sanrio.co.jp
admin.ranking.sanrio.co.jp
ftdev.test.sanrio.co.jp
mailmag.sanrio.co.jp
www.sanrio.co.jp
faq.sanrio.co.jp
pages.friends.sanrio.co.jp
view.friends.sanrio.co.jp
shop.sanrio.co.jp
stores.sanrio.co.jp
license.sanrio.co.jp
locations.gwwade.com
www.shop.sanrio.co.jp
akamai-san10.exacttarget.com
ec-stg.sanrio.co.jp
tensaikansai.sanrio.co.jp
mailmag.sanrio.co.jp
oma-ia.sanrio.co.jp
www.sanrio.co.jp
*.sanrio.co.jp
faq.sanrio.co.jp
akamai-san10.exacttarget.com
ec-stg.sanrio.co.jp
pub.friends.sanrio.co.jp
www.sanrio.co.jp
akamai-san10.exacttarget.com
faq.sanrio.co.jp
www.sanrio.co.jp
www.sanrio.co.jp
search.sanrio.co.jp
oma-ia.sanrio.co.jp
locations.telemus.com
shared-certificate.user-space.cdn.idcfcloud.net
shared-certificate.user-space.cdn.idcfcloud.net
stores.ippudo.co.id
stores.sanrio.co.jp
shop.sanrio.co.jp
license.sanrio.co.jp
shop.sanrio.co.jp
pages.friends.sanrio.co.jp
click.friends.sanrio.co.jp
view.friends.sanrio.co.jp
license.sanrio.co.jp
click.friends.sanrio.co.jp
akamai-san10.exacttarget.com
view.friends.sanrio.co.jp
shared-certificate.user-space.cdn.idcfcloud.net
license.sanrio.co.jp
pages.friends.sanrio.co.jp
akamai-san10.exacttarget.com
view.friends.sanrio.co.jp
mailmag.sanrio.co.jp
click.friends.sanrio.co.jp
www.sanrio.co.jp
sp.shop.sanrio.co.jp
stores.ippudo.co.id
akamai-san10.exacttarget.com
admin.ranking.sanrio.co.jp
oma-ia.sanrio.co.jp
shared-certificate.user-space.cdn.idcfcloud.net
www.sanrio.co.jp

Certificate

The complete raw certificate details for oma-ia.sanrio.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse9s9GUPYN4mbAAPD1Zs
LVHNo/Ks7HzQpqJ53ifJWndjN5LkjicyQuDZAQwmqPWSLWuDrS/eIvgSQKUHSMML
6ih4d1tsKVw9u1Nv8Fve4f2nWc0qmij4Q5blP4JksYe5EwnV/B5jO2LttqcJ+Srt
HsbmKFwIHD+zc+gwHmHXw89tzQwQBatKQpChwtGHZJTDbkm1wm1W2IYrw1aQAxq0
uCeawfQ5mG+oFaBpkqRuAOKaPWGKcf0P/4ppKnhUp6jltDHTXI+PE5+HFDO7YUHp
SN1729yS6I7HxIpOO6d39YP1TVVUZLlVLM69Gnudjt7SGRt6lg8QBVtWbPjm7DRm
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 674115656050745620847121830
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-11 06:20:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TOKYO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHINAGAWA-KU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'It'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sanrio Company, Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'oma-ia.sanrio.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22462245144756695129819319890000175260120493009219084105484603652259789174793136338196157898597028122044362928692151612993420181622478344344472531456123524374850477037804205081435933921733444984052466408004332191259267665966271578468773872218989362620859811074784706465976376699769193678203170261336325374693559607774201457521407305899613645555379521070386959537078147361388958241296380535724998102301746074035234242031098466763723938302368225919474386458008476627936907304795273587395926852459601049671299300220708736679693390002968303071710541312831063411287138059846806954142814766680323068125937567635780173850229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oma-ia.sanrio.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9e8bc01baa2f2ab9e37d412f9d23554ffa93fde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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