dcm-kahma-staff.net

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 3d:5c:4a:64:82:14:bf:0d:e7:c4:68:63 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dcm-kahma-staff.net,OU=Domain Control Validated,C=JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:5c:4a:64:82:14:bf:0d:e7:c4:68:63
Serial Number (int): 18990158083674061591894321251
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 87:f0:a5:9b:16:f2:b8:bd:7a:fc:ec:74:0b:28:08:f0:d3:79:27:f2
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 95:29:6b:f6:5b:14:d5:1d:98:9d:d4:46:83:76:9e:4b:9c:b6:0b:6a
Fingerprint (sha256): 67:9a:f8:12:b6:57:fd:a2:2d:0f:16:f0:e0:7f:ed:40:e9:7c:b2:1f:fb:24:7c:5b:d1:e5:5d:22:0a:85:df:e5

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate dcm-kahma-staff.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dcm-kahma-staff.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dcm-kahma-staff.net

Other certificates including the domain name dcm-kahma-staff.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for dcm-kahma-staff.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCfj07OLi1+N0vKtx+T2
PdczUDMdWW+65qklbjFIDV41KBmc48hP/ehA9GTzfm3QnsoM8h85Lt5AehkXhoQn
KhVfFVRetpr/FGkkdINYDycCpJkJNuATWX6P6RyC3YKYBiB7rXQ3bkAgjCqhJITB
dvxPvwFFRR0XFCLb0RKspj4WD5ou+Yy9HEkqQ6o/0QXgD+klxCdOaa7STsLhl2jz
ybjIzo5rIPV2+wpkBKzsIjBPmnK1fcZGpbPw2QAV32L+ZjmidCqtOHmTaTgziXv0
ayWAfP/pZjXrfDKUQPN9y4ApSuOP9WG5P48V6olTAHJeBSK4RJ33jYNM/wwxR8+k
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18990158083674061591894321251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-05 22:23:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-10 23:40:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dcm-kahma-staff.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23752471800626985293698037171808932000816584597584742181439377463718282098997753497221253844491236877133226132692000100594935477035736006217026543354826708286486203304782569019602617252557730154982154844317641046601835862140644116460154957839181880670769657987645060697763125228908544940321425927612976333299210699461561251698300755922654575075654343488281096152299417454349637105556025612596074130924185610895023253915245211175663476577791251543785872276184551964883188548264003251608380642223383053742539209585187908673010988824025511922699254385733311065074944736447690424248573782836471555612837329979068417811703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcm-kahma-staff.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87f0a59b16f2b8bd7afcec740b2808f0d37927f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							0258007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015aa091ff8b00000403004630440220113f41220dc06f49d6bfcc072e0bac9351ef95342ef6dfa3caa869bb48da5b260220296f0ab52f11aa16008fdc5da846080bafdc2dd070430546807e43c078120d55007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015aa092002800000403004730450220372da2f6ccbd11697a75ba61252073b4651528234714fcd8defa465ff538d7e0022100d2fd35e7ce953ae7a4bfbe83d6b34c27e0de26b3fa81549b3777d18d12c647c50077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015aa091ffe00000040300483046022100d0497d352ee7372369c432c11df44581d56b9316a5f741faa98d9989eaefacac022100aca2bc5f8712a6389ae007ce25cfd2357756af55649d87b5bcb988d4d20b1f01007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015aa091ff6e0000040300483046022100be81ab1ac630a023027b41300b96bc0c2517866d4f06e1dfbc34572aa22c43d5022100f202a2d1c4c5f70f36122bf7dd7cf1a1c91e3afa4c649c9707b7adbbd70586f2007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015aa092025c000004030046304402206e98de90c63798af9542eb479b2c15213143731336a7de23a064ff706f89b697022026000075b85147d2b6057c57ba36c187aef3a274b18a3de9ca3f40d75fe237dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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