okinari.jp
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:5e:3f:a9:c1:a6:2a:70:57:35:8f:3a:cc:47:3a:a0:50:cd was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=okinari.jp
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5e:3f:a9:c1:a6:2a:70:57:35:8f:3a:cc:47:3a:a0:50:cdSerial Number (int): 293408023075422560255369520530231411101901
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 33:af:9a:78:c5:d6:25:77:6e:6b:ce:7d:36:bd:1c:77:43:9d:01:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 28:a1:21:92:67:65:14:f9:2f:28:09:02:dc:42:83:0f:44:9f:f2:b0
Fingerprint (sha256): 68:ed:f7:cb:e3:93:47:b1:66:2f:78:26:5b:74:78:86:50:07:34:14:94:35:f8:71:c0:2b:e2:8a:fb:2a:d9:02
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate okinari.jp
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for okinari.jp
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
okinari.jp
www.okinari.jp
www.okinari.jp
Other certificates including the domain name okinari.jp
(limited to 100 certificates)
okinari.jp
thedeval.com
okinari.jp
www.makkan.trade
union-bauzentrum-roehlinger.com
okinari.jp
okinari.jp
www.okinari.jp
okinari.jp
test.freemarket.studio
okinari.jp
lichtansuu.huyenkhongtamnguyen.com
capitolhilldentistryandbraces.com
okinari.jp
okinari.jp
stage.player.lumiere.is
admin-sta.jointriage.net
okinari.jp
summerknights-actor.com
agente.duga.org.br
okinari.jp
okinari.jp
okinari.jp
datadog-ui.nerd.vision
okinari.jp
blackcastle.se
okinari.jp
okinari.jp
cln4k5q260000yyn92rstadqj.tenant.test.iota-app.com
pulpcoin.vip
staging.cms.blockframes.io
okinari.jp
okinari.jp
okinari.jp
www.thomasdupre.fr
comvi.info
consultora.podeperguntar.com
thedeval.com
okinari.jp
www.makkan.trade
union-bauzentrum-roehlinger.com
okinari.jp
okinari.jp
www.okinari.jp
okinari.jp
test.freemarket.studio
okinari.jp
lichtansuu.huyenkhongtamnguyen.com
capitolhilldentistryandbraces.com
okinari.jp
okinari.jp
stage.player.lumiere.is
admin-sta.jointriage.net
okinari.jp
summerknights-actor.com
agente.duga.org.br
okinari.jp
okinari.jp
okinari.jp
datadog-ui.nerd.vision
okinari.jp
blackcastle.se
okinari.jp
okinari.jp
cln4k5q260000yyn92rstadqj.tenant.test.iota-app.com
pulpcoin.vip
staging.cms.blockframes.io
okinari.jp
okinari.jp
okinari.jp
www.thomasdupre.fr
comvi.info
consultora.podeperguntar.com
Certificate
The complete raw certificate details for okinari.jp in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISA14/qcGmKnBXNY86zEc6oFDNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjEwMjAwNTdaFw0x OTA0MjEwMjAwNTdaMBUxEzARBgNVBAMTCm9raW5hcmkuanAwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDSYlSH/mfYPqgfG/OlfU2R7HE2FPL4Nhlq6RPB deXid6xA0jMs+D4XLwVQoygwRUJAmS1VtYrVck9OQpARbOm6cCJXvjuV9wPW1h1n fLzqs3Oc2diZfHlcFTeRu0IuTK8nqQgoR5VSdU1IBI+YnRu4AtNa/WfF5WS2N0Xd mMTvsMfPZB8xg7di7zB3c1QfvP6WXECXuF0O+9L7TS+LUQo+5ky/EFj3YhWZqb/k LvCJhshIa5fjuPFo95JkHPNshmEfWMwl6JZScENvp9Q5+TZIqHTR9Q0dl5RWpl3W I82FQczcvazbd6vttwcGyvsV19wg8JHWbSceih3hyl9Kl66jAgMBAAGjggJwMIIC bDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDOvmnjF1iV3bmvOfTa9HHdDnQF4MB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w JQYDVR0RBB4wHIIKb2tpbmFyaS5qcIIOd3d3Lm9raW5hcmkuanAwTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwB0 ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWhuWpboAAAEAwBIMEYC IQD2s0MhuBk5LNcFqlFYiCpICTgl9pggLLeIOYHzOx3/gQIhAKG+blLFYdO0BXIA pG4xhIKzvlhRyfYp/MuHCQYwTaZCAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk wwz05UVH9HgAAAFoblqW6QAABAMARzBFAiEAj/gT9q4hVXosI1XONIhrdUXIWbcV PB8yJzReOxLVnv0CIADUlmGGExJ0YzlUk2SG9tjwo1uEvb+ZCEITX++ZoAWOMA0G CSqGSIb3DQEBCwUAA4IBAQAyhxapNGfstV5QeGPl5WhfU3LK0SvbE52D86VWAVrL J4a3gY8BGgf0zAy0m+SR7gAXtbDn2I+6QtEMYl4j9WZkFTdzXbuh6apepJVzZSsD Ecl5d2RVDvMjyVP+TaYbk5iBbP3o0JSuljP67aBF2N7dXSNxeocEZ0vELESO5cz+ YNtRhWSsQ6HRM7GJfrYtqn+9Hj9uKUz79eAm3GsY7d4eqHisKbLMgsGZ5tAohhZ0 4hu8ruE/BOc5ohiPyFMyAOiF5hgswY4yO/3tc8gwCasBW7hv5a7FMDxCEnwaKHOI Eljjci5vJYPbJYQcMc1ESqwYzztpN3mUwmTQ0q34f8oT -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mJUh/5n2D6oHxvzpX1N kexxNhTy+DYZaukTwXXl4nesQNIzLPg+Fy8FUKMoMEVCQJktVbWK1XJPTkKQEWzp unAiV747lfcD1tYdZ3y86rNznNnYmXx5XBU3kbtCLkyvJ6kIKEeVUnVNSASPmJ0b uALTWv1nxeVktjdF3ZjE77DHz2QfMYO3Yu8wd3NUH7z+llxAl7hdDvvS+00vi1EK PuZMvxBY92IVmam/5C7wiYbISGuX47jxaPeSZBzzbIZhH1jMJeiWUnBDb6fUOfk2 SKh00fUNHZeUVqZd1iPNhUHM3L2s23er7bcHBsr7FdfcIPCR1m0nHood4cpfSpeu owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 293408023075422560255369520530231411101901 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-21 02:00:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-21 02:00:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'okinari.jp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26558532471730251678594638770066002987220677606133980679515854808974635196886669361538896427595863760947664908655853879314581390858424928271504140954283954232491600555610464293241452583615951796920463351573045165686139862024666745747578606747938003161033925504117187577827371250840626648519621955206876544127799703646400127983122664953064007309513713834502593026106881344661096733171499696565851697676569513859545097741047566591440935852571935700754885201477959797158725292201089143360103986964113526551682683041359759689210246718067380768495304901097581940977624035370419023461591077970117812727892269059152322997923 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 33af9a78c5d625776e6bce7d36bd1c77439d0178 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okinari.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okinari.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001686e5a96e80000040300483046022100f6b34321b819392cd705aa5158882a48093825f698202cb7883981f33b1dff81022100a1be6e52c561d3b4057200a46e318482b3be5851c9f629fccb870906304da642007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001686e5a96e900000403004730450221008ff813f6ae21557a2c2355ce34886b7545c859b7153c1f3227345e3b12d59efd022000d4966186131274633954936486f6d8f0a35b84bdbf990842135fef99a0058e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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