api.tsi-holdings.bme.jp

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 4a:b5:cc:fa:58:94:34:61:94:c1:f5:a4 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.tsi-holdings.bme.jp,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:b5:cc:fa:58:94:34:61:94:c1:f5:a4
Serial Number (int): 23121674280961090966870160804
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 4e:d3:06:1d:99:ad:37:65:39:49:c6:93:1a:ba:c7:20:32:0d:d2:c2
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): b2:5e:b3:51:78:4c:0e:c3:2d:5d:16:05:f9:26:32:b5:ee:2e:54:ec
Fingerprint (sha256): 5a:06:83:1f:65:4b:92:94:4a:b3:6a:57:cc:45:6e:71:3f:96:56:71:35:92:13:4e:52:33:40:62:37:f3:82:64

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate api.tsi-holdings.bme.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.tsi-holdings.bme.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.tsi-holdings.bme.jp

Other certificates including the domain name bme.jp

(limited to 100 certificates)
t.bme.jp
hamazushi.bme.jp
api.bme.jp
minoh.bme.jp
r.bme.jp
e.bme.jp
api.bme.jp
h.bme.jp
b.bme.jp
tsi-holdings.bme.jp
h.bme.jp
t.bme.jp
e.bme.jp
n.bme.jp
a.bme.jp
w.bme.jp
e.bme.jp
c.bme.jp
api.tsi-holdings.bme.jp
n.bme.jp
k.bme.jp
minoh.bme.jp
api.bme.jp
k.bme.jp
r.bme.jp
e.bme.jp
w.bme.jp
api.museco.bme.jp
w.bme.jp
b.bme.jp
tobu.bme.jp
a.bme.jp
hamazushi.bme.jp
img.bme.jp
t.bme.jp
n.bme.jp
b.bme.jp
minoh.bme.jp
k.bme.jp
t.bme.jp
w.bme.jp
r.bme.jp
e.bme.jp
w.bme.jp
a.bme.jp
n.bme.jp
hamazushi.bme.jp
r.bme.jp
a.bme.jp
api.bme.jp
api.bme.jp
b.bme.jp
t.bme.jp
n.bme.jp
h.bme.jp
img.bme.jp
api.tsi-holdings.bme.jp
h.bme.jp
t.bme.jp
b.bme.jp
api.tsi-holdings.bme.jp
img.bme.jp
b.bme.jp
h.bme.jp
img.bme.jp
t.bme.jp
minoh.bme.jp
api.bme.jp
img.bme.jp
a.bme.jp
n.bme.jp
n.bme.jp
t.bme.jp
k.bme.jp
h.bme.jp
r.bme.jp
minoh.bme.jp
api.bme.jp
r.bme.jp
tobu.bme.jp
akb.bme.jp
img.bme.jp
*.creema.bme.jp
api.tsi-holdings.bme.jp
akb.bme.jp
api.bme.jp
b.bme.jp
e.bme.jp
api.bme.jp
t.bme.jp
api.tsi-holdings.bme.jp
img.bme.jp
n.bme.jp
t.bme.jp
api.museco.bme.jp
r.bme.jp
a.bme.jp
akb.bme.jp
e.bme.jp
img.bme.jp

Certificate

The complete raw certificate details for api.tsi-holdings.bme.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4rz2djI49n4nu1BWvIZ
iXnlKnvUnyl+VxBPtN1L4LdxzFFVIvZzDTFopOm4spGJ+HgP5p8TSs0rpfUyLk1o
gF+cFYahw9sc+sSCEGJNPtLaZ3/HpsAQxYYEZ5gE2rSZ4Wer0VvcpCytqGzyWwC3
rP15Uhx/7hBT9IIZ2mK6/w7cwTn+x/VHocxlLPEuxqvVhMFx4br40JfuJQLouBQR
XZLz39QPhgytjEl4UvWP2DO+PDrAcnNzptG7SH50d4FRo4KfrFcwwJF4H/3QtdDO
732RCCy1ck0Qql1kMXxi7O+uDi6kfDLvHSJi5uhbXc7CtsqCieTpmkeYVPgv/hTJ
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23121674280961090966870160804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-30 04:44:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-01 07:25:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.tsi-holdings.bme.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25694895960756019585267893194946059220906961705194298762746615020078697456840036072301641015057663364320654608538033102868154651353813069186619491679361351283617722676402761380110228379936239389911840120051078451871655185330200240019728683549284877314630816014367669150738314046825990006706183087784426160183289404154449305575644464363914362911550885195750071713907100637241669162299669145305125050074070474124703818512589002625804098171023820153198541629742762714887932266375148314367035902384243364881472654048155990072231056488156560672843754870619810703324800559373170302582876707386258752151999437122298919045449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.tsi-holdings.bme.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ed3061d99ad37653949c6931abac720320dd2c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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