www.mmdlabo.co.jp

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 3d:21:40:cb:8e:77:59:8a:5c:cc:5d:55 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mmdlabo.co.jp

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:21:40:cb:8e:77:59:8a:5c:cc:5d:55
Serial Number (int): 18918786137559054901721193813
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: ba:94:23:62:a2:e3:6c:22:0a:64:57:00:fc:79:2e:a4:b0:b2:7c:ee
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): af:eb:a8:9e:b8:d7:ff:a3:f5:a2:66:f7:2a:06:54:88:cf:36:75:d9
Fingerprint (sha256): 58:11:4e:f7:fc:42:5c:49:f4:9f:d3:22:2a:c1:3e:a2:7b:3b:21:ef:c9:33:57:1f:7f:86:fe:6a:52:1d:47:08

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate www.mmdlabo.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mmdlabo.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mmdlabo.co.jp
mmdlabo.co.jp

Other certificates including the domain name mmdlabo.co.jp

(limited to 100 certificates)
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp
www.mmdlabo.co.jp

Certificate

The complete raw certificate details for www.mmdlabo.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG+7WXuwcoMA0nG5R67J
JQMB+ppztfTriaquX7ktFmG2RiwuStVu1+FYWdHKUgqoKGn3imahBglajTgXC1oo
W4KbnWsClmmTucR/ezgql8tykXPLDBA+Iu8V3s91pe12gb0VNFuGEvZkHVd0lm4C
GXm4aduBS2wcNibpxk64dQGTPjMtkxjVKanRW/1gvJjs9JDcjHyM7hE6jBjfYtCF
ZjWbniKhCzN0Twe8G1cSHmN+iSytp7TNUUCbQ8KHBgO9EEji0mYDArYhz2hYgb0x
xBi0qXp5vFfowh0+XYtpkB5uq34a3RVU3uAqPq84fd2f0DenFt/F4Jkp5C8OgFFs
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18918786137559054901721193813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 11:16:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 10:50:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mmdlabo.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25302758014127488536738521799491863912381146902662339624906520049973916347781808133294821390189188454143242293081812936579972396726944481399986790927000341947349261066972300809134989153604339038309654497870143776178298166151313376398702536786788129939788996497967254401081496575499846706920319051199425936844324992503635639905262161016826346223357359168112782657466751080688497941162876174173242772339150945425048947406514800996638372118648147342029873309226202336814396000118213319716713908641202423871354763845944721620126869236965437285810898901487060142306626688000946058365493978714316667361919820816140454685933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmdlabo.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmdlabo.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba942362a2e36c220a645700fc792ea4b0b27cee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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