OV SSL/TLS Certificate for www.nissenren-pfc.jp Issued to Nissenren Pacific,Inc.

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign RSA OV SSL CA 2018)

About the www.nissenren-pfc.jp OV SSL/TLS Certificate

This certificate with serial number 2c:81:cf:7b:3b:c7:c5:ca:88:15:3d:81 for www.nissenren-pfc.jp was issued on by GlobalSign nv-sa.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for www.nissenren-pfc.jp provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 2c:81:cf:7b:3b:c7:c5:ca:88:15:3d:81
Serial Number (int): 13774271665988574312521874817
Serial Number Length: 94 bits, 12 octets

Subject Key Identifier: 00:d2:3c:d5:e8:95:2b:5d:74:ba:9d:d2:6b:56:4f:0e:cd:19:d1:ad
Authority Key Identifier: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (SHA-1): 4b:ab:ee:c4:21:1e:8b:e4:f9:c9:9f:cb:40:09:10:88:26:82:5a:7b
Fingerprint (SHA-256): 86:7b:56:4b:eb:15:fd:7e:b1:dd:d7:11:02:b4:6d:00:7c:a8:47:18:63:28:a9:05:5b:15:8c:47:1e:f1:19:9b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate www.nissenren-pfc.jp
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.nissenren-pfc.jp

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.nissenren-pfc.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHq1cWPcK3acfeGVOGc/
H4ZyOVuq3JRJb7hE+lk0pB4AjgPNNfBRo3b5oV4KQxNtw5S0I9clJzTINtAwuns0
Cw856mGZ/uZry3UVGyE9vCcOTBGUz7eTCDIaOZ6Y/rYMCRXug+eOfhgkYElK/lmn
sNUTJqPOuo7NiivMoIfY0bIXTPG69UWWW7NKojidgV2eHHvZDv7eacQkxjbyq5Xu
lWZl+mFO6Q6Ycgpm8m/y9RSWEKOjYbuDuCzIWfH8B8ZiLKmm5dUJH1O6Blk46ugU
wikOG6ZcNnwvCT+r4V8zfFYfDP8C+320ZRZtsyU/Lzp91ED5cEw2T59w1vmjD06R
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13774271665988574312521874817
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-20 06:59:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-21 06:59:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hokkaido'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tomakomai-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nissenren Pacific,Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nissenren-pfc.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25308170938716948561026141761659361492094931811954990815247194352213990041541905667074262214834227740168652853744716681328671698968468559932836327844201565757778474139168704556098196099430824145194889126945234968051540885953998259077857701481269246795460010567622488705116521787463093378347437873128028488887551240910067975021392626434713553349162140745702925173286857558685826981175288865724920756686098873458661161572792015617146747456296688132568555809328539645477850614515058993178741733066915518064082525345174085446886871299117444122583339749416458026151051707276825479284990630661930515710929441136469913538961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nissenren-pfc.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nissenren-pfc.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00d23cd5e8952b5d74ba9dd26b564f0ecd19d1ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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