www.frontage.jp

- FRONTAGE INC. -

Issued by Cybertrust Japan SureServer CA G4

About this certificate

This digital certificate with serial number 32:3d:ae:be:c5:0a:e3:4e:c3:cf:98:05:98:9c:17:cc:ec:4a:e0:ba was issued on by Cybertrust Japan Co., Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

FRONTAGE INC.

Organization: FRONTAGE INC.
State / Province: Tokyo
Locality: Minato-ku
Country: JP

Cybertrust Japan Co., Ltd.

Organization: Cybertrust Japan Co., Ltd.
Country: JP

This certificate will expire on

Certificate Details

Serial Number (hex): 32:3d:ae:be:c5:0a:e3:4e:c3:cf:98:05:98:9c:17:cc:ec:4a:e0:ba
Serial Number (int): 286825106451618633970106466047117617962729267386
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: aa:46:d2:d3:1d:d6:3e:08:48:ca:52:34:8a:14:68:9b:c0:ee:5a:d4
AuthorityKeyId: 62:a7:d2:da:de:85:b6:92:f1:85:bc:f6:e8:95:9d:75:a0:fa:4e:1f

Fingerprint (sha1): 2b:66:d9:97:35:a1:93:dc:25:4a:1a:ec:da:65:16:9d:f1:b1:92:35
Fingerprint (sha256): 6a:8f:68:f3:5b:51:2d:42:36:70:55:a1:6b:2b:be:29:59:36:44:38:2c:b8:d5:1d:dc:56:11:22:49:ad:38:30

Issuing Certificate URL: http://crl.cybertrust.ne.jp/SureServer/ovcag4/ovcag4.crt

Revocation information

OCSP Server: http://ssocsp.cybertrust.ne.jp/OcspServer
CRL Distribution Point: http://crl.cybertrust.ne.jp/SureServer/ovcag4/cdp.crl

Check the revocation status for certificate www.frontage.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.frontage.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.frontage.jp
frontage.jp

Other certificates including the domain name frontage.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.frontage.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HbQQO0BhNuP6d9AfgRj
XMYxI4grOCxKO1uT5HomU/POKhHwc565JEyUW8NLKyrK5upS+4iAUY2Ok7c3Zos1
UcY67jhXSbVuahnaKD/TsNtKGspHP/8BP5UQDOC5PQ8rrsp0ICNG4n3At8l5UFNh
YyrY2gFxLd2QfpwC6A9U3pf7rqzhGpSEmFeb/L3nYyaaJBtQl9xhpIzR4NxfVRDz
/KjCv+cajmtWptOkSxPEi7iqaPh8bttas0I5cc/foX1VTfZ0QHh43PpDNyG283MI
Rw3gSOFKO/OS7aniqAwFzJufcOza/NCnX6+sClolEkRO+Q4MqI+Hwc5UllTGVx3s
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286825106451618633970106466047117617962729267386
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan SureServer CA G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 00:11:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-14 14:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minato-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FRONTAGE INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.frontage.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27326062988573738383943723146004135098858760280617304448638551875566391119562382382404177317240903224494348212827346632414794998393369165503061986923689427286583998808161925664014049847582784609514088503316741489646286159434494806371884932109306131486455439486305353820534764373916403069745601030806999385931202302067605382424893181769560369361413363164104641017525366622700953749301214636480756838001550331902984613877033713718121129344797626048280749616685114345665457819166152005680986388474098636567727568647680139183712038662583050686212242792888099134385635674850035356848532558975136815858008702307453361843331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200081.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.cybertrust.ne.jp/ssl/repository/index.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frontage.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontage.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssocsp.cybertrust.ne.jp/OcspServer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.cybertrust.ne.jp/SureServer/ovcag4/ovcag4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 62a7d2dade85b692f185bcf6e8959d75a0fa4e1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.cybertrust.ne.jp/SureServer/ovcag4/cdp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa46d2d31dd63e0848ca52348a14689bc0ee5ad4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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