reg4.tok.tnc.ne.jp

- TOKAI Communications Corporation -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 7a:92:33:1a:f6:19:88:f5:0f:40:b6:0c:11:8f:4e:dd was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

TOKAI Communications Corporation

Organization: TOKAI Communications Corporation
State / Province: Shizuoka
Locality: Shizuoka-shi
Country: JP

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:92:33:1a:f6:19:88:f5:0f:40:b6:0c:11:8f:4e:dd
Serial Number (int): 162924927366092015258028611998508338909
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 33:77:3f:0f:86:f9:d7:0b:3d:89:e5:b1:79:57:7c:75:83:01:1b:2f
Fingerprint (sha256): 63:0f:46:9f:2d:b3:83:92:85:e3:20:71:7f:45:36:79:99:fc:8a:93:60:d1:c0:24:48:cb:05:a7:46:97:01:99

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate reg4.tok.tnc.ne.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reg4.tok.tnc.ne.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reg4.tok.tnc.ne.jp

Other certificates including the domain name tnc.ne.jp

(limited to 100 certificates)
reg3.tok.tnc.ne.jp
mconfig.tnc.ne.jp
web2.tnc.ne.jp
www.tnc.ne.jp
pocketbbs.tnc.ne.jp
member.tnc.ne.jp
reg2.tok.tnc.ne.jp
reg5.tok.tnc.ne.jp
cs.tnc.ne.jp
www.coupons.tnc.ne.jp
member.tnc.ne.jp
speed.tok.tnc.ne.jp
partner.ser.tnc.ne.jp
speed.tok.tnc.ne.jp
reg3.tok.tnc.ne.jp
www.tnc.ne.jp
*.tok.tnc.ne.jp
cs.tnc.ne.jp
mguard.tnc.ne.jp
partner.ser.tnc.ne.jp
*.tnc.ne.jp
pocket.tnc.ne.jp
reg4.tok.tnc.ne.jp
reg3.tok.tnc.ne.jp
*.tok.tnc.ne.jp
speed.tok.tnc.ne.jp
reg3.tok.tnc.ne.jp
web1.tnc.ne.jp
orb1.tnc.ne.jp
www.tnc.ne.jp
*.tnc.ne.jp
pocketbbs.tnc.ne.jp
cs.tnc.ne.jp
reg5.tok.tnc.ne.jp
pocket.tnc.ne.jp
www.coupons.tnc.ne.jp
mconfig.tnc.ne.jp
reg4.tok.tnc.ne.jp
reg2.tok.tnc.ne.jp
reg4.tok.tnc.ne.jp
mconfig.tnc.ne.jp
*.tnc.ne.jp
partner.ser.tnc.ne.jp
www.tnc.ne.jp
reg4.tok.tnc.ne.jp
pocket.tnc.ne.jp
pocket.tnc.ne.jp
reg2.tok.tnc.ne.jp
www.tnc.ne.jp
wm.tnc.ne.jp
web2.tnc.ne.jp
reg4.tok.tnc.ne.jp
partner.ser.tnc.ne.jp
web1.tnc.ne.jp
pocketbbs.tnc.ne.jp
mguard.tnc.ne.jp
web2.tnc.ne.jp
reg3.tok.tnc.ne.jp
member.tnc.ne.jp
speed.tok.tnc.ne.jp
reg2.tok.tnc.ne.jp
reg4.tok.tnc.ne.jp
reg4.tok.tnc.ne.jp
web1.tnc.ne.jp
web2.tnc.ne.jp
reg5.tok.tnc.ne.jp
*.tnc.ne.jp
reg3.tok.tnc.ne.jp
pocket.tnc.ne.jp
mguard.tnc.ne.jp
*.tnc.ne.jp
mguard.tnc.ne.jp
wm.tnc.ne.jp
reg2.tok.tnc.ne.jp
mguard.tnc.ne.jp
wm.tnc.ne.jp
reg4.tok.tnc.ne.jp
partner.ser.tnc.ne.jp
pocketbbs.tnc.ne.jp
*.tok.tnc.ne.jp
web1.tnc.ne.jp
*.tnc.ne.jp
speed.tok.tnc.ne.jp
coupons.tnc.ne.jp
reg3.tok.tnc.ne.jp
pocketbbs.tnc.ne.jp
reg3.tok.tnc.ne.jp
reg4.tok.tnc.ne.jp
wm.tnc.ne.jp
reg2.tok.tnc.ne.jp
pocketbbs.tnc.ne.jp
wm.tnc.ne.jp
pocketbbs.tnc.ne.jp
pocket.tnc.ne.jp
partner.ser.tnc.ne.jp
reg2.tok.tnc.ne.jp
pocket.tnc.ne.jp
reg2.tok.tnc.ne.jp
reg3.tok.tnc.ne.jp
*.tok.tnc.ne.jp

Certificate

The complete raw certificate details for reg4.tok.tnc.ne.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Dq5iNMtmArCqZaiTH1B
1g7YrXQOMwduye0fz5gaM/PU2lCGoLDtHTQm6Pd1FniFrZ1PaSzUmDTEHzmea+1s
aYe6ahG/w6MuV9ITtSg1o0QqkuhGgFIqa5wG886x0ehDTgucGymx3wJ4vOQoM0Wh
Mov2lIddf7m6hFWONsf+TdeXJSLYzaMiNQfcA02Vr1jU9DtMdAzklUX6JVsXVLvU
m7QdL75TlfVxRd0VjCvC3dHzQZ/I06A/ADblTN5IpPaXK+tdUa+zf/64jJjnfO5U
tPdaephDdsAG7L7ZrSr4BWD0OjU2u21QewyejPPEPmD1PzItSH2/IuZ8QyXXG0FG
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 162924927366092015258028611998508338909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shizuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shizuoka-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TOKAI Communications Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'reg4.tok.tnc.ne.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27296432123239871403558238243896124146996787465878966229761385300496040074981029151677751905008410808657133087290023187390259660646646363071011415474310903015688854489359662751022335629574105244930274584485045836045672247850282568991593955557490204840926332584331952752486308001398665877877439907202691046598816834744885586754162398669548345724496772886833952882727118205540321104788341657116285562359617388371036490020646382186317093781583469321929126131086189042860123405606065601935404034789661038685212283491849544382052418538359876002302281543411986409413275393692750066002865803800141068224990833947488116885073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reg4.tok.tnc.ne.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001580ae002cb000004030047304502203b72970d6d352c927b4bd812e1d7bcf4b3665407ad270a82fad91e506604796602210084d67ceb874f82271ff3501febce9caf9cc19e7b680089d75f5672d2e2d8cd4700760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001580ae002f10000040300473045022100a615f05a04ad05798fb58f6d368bce9d55e0e1be5af1c3ba6e83fe087f18c9d1022053888dfb0f8610649787273a9143605b4c9dfa08bc582cc6e4f3edc899d5de8c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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