OV SSL/TLS Certificate for ajp.jalan.net Issued to Recruit Co., Ltd.

Certificate is witin its validity period

Issued by DigiCert, Inc. (DigiCert G5 TLS RSA4096 SHA384 2021 CA1)

About the ajp.jalan.net OV SSL/TLS Certificate

This certificate with serial number 0f:da:9c:ff:23:1f:30:61:ae:f9:b5:8b:5e:41:51:6b for ajp.jalan.net was issued on by DigiCert, Inc..

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for ajp.jalan.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0f:da:9c:ff:23:1f:30:61:ae:f9:b5:8b:5e:41:51:6b
Serial Number (int): 21073524921883621834257768273449931115
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: c1:0c:18:d8:a2:75:52:3a:ee:53:9f:2f:79:91:c7:eb:23:5b:03:a9
Authority Key Identifier: ae:ba:94:33:ba:ef:37:4d:0b:d7:18:ef:4a:e4:a1:0d:bc:07:b6:73

Fingerprint (SHA-1): 6e:51:a5:2c:69:10:f8:0a:e7:a4:16:56:39:96:f5:1d:c1:62:56:5f
Fingerprint (SHA-256): 16:34:36:82:06:cf:99:40:b8:f6:0d:76:cf:be:64:9a:39:49:a7:27:fb:b7:6c:3f:6a:6b:a2:32:a2:71:ea:87

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crt

Revocation Information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crl

Check the revocation status for certificate ajp.jalan.net
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for ajp.jalan.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

ajp.jalan.net

X.509 Certificate

The complete raw X.509 certificate details for ajp.jalan.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Rs39nHwnBhX/O3I2CA
A33IgHV5ZoSR2iqgHbnt3D9aGc/BkePviE6wvydlokQ+/10+K7tPknindYd5lOV0
/vkJb/y8tTzx72Q55eHKg7voQXz7pGGnYCChjAGd0L94WwGx1QcaCkga13CeyKri
wL23UuMgwGH5xbvhQWELb7iB4RzNO32ZxEwvwEHgYzMcbTBm9OwQCSpSRtdCVqWM
kWxyxnRhHIHeT2BWCku2YEOUOwsVrrRJjYp3nUIEZVIgR+SKzAqihe8T8IW8HcfG
dYcy88wqoIPKeWV1CWVay8asLitYcZQhrJr5LHu6qTGjcig67PvwqW2AjJ87LyIH
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21073524921883621834257768273449931115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert G5 TLS RSA4096 SHA384 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-04-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Recruit Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ajp.jalan.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22204344078076550015371609406917988608881711852339409820393295788163365487101018690298304056490075255303081220558359563209353656169340723117856338654673096447652333164959060054871997696982698184420736767784298597427312976168133708563787626967042895338207990287464262631276953375802407079264036201319502244104225273456323930056067388752412953299933907168206898845672762986943482014404913870475413358209165116030922734737292092071751504981342291982932832755234558296793088200731304551115447807134172362708666699855600129905734354892183248029304634232088463434646436573694451834497213247203862843521229919714020050470777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aeba9433baef374d0bd718ef4ae4a10dbc07b673
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c10c18d8a275523aee539f2f7991c7eb235b03a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajp.jalan.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a0077000e5794bcf3aea93e331b2c9907b3f790df9bc23d713225dd21a925ac61c54e2100000195b6e649bc0000040300483046022100ead0c7352e0afbabb58eac218b029cbaecdb6ca9abf9de4591e542d15a914169022100eb39bb3bc143ca8159563a7e3228e1993bc64e3fdf74bb318445c71e8b1317450077006411c46ca412eca7891ca2022e00bcab4f2807d41e3527abeafed503c97dcdf000000195b6e649ed0000040300483046022100859169161036d1d943fef0b8fd54ce4ca06c064e4821c58f45ffe310de9bc246022100e80b90522aa6db46eb233cb7973623b729e8eb4ffdd074ea0bf7a4b9a7536c95007600969764bf555897adf743876837084277e9f03ad5f6a4f3366e46a43f0fcaa9c600000195b6e64a0200000403004730450221009ece68287251d3f40d3ca414bc493d4b510293c2c9f291cf84a258a3dc7ebd790220392f467689408b2ca34f2ef369d265c41a7014754861be7be9c2e660a02a44cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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