ss023.securesite.ne.jp

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 03:6d:fb:4f:70:e2:74:c0:85:26:cf:f9 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ss023.securesite.ne.jp,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:fb:4f:70:e2:74:c0:85:26:cf:f9
Serial Number (int): 1061414723216204137421524985
Serial Number lenght: 90 bits, 12 octets

SubjectKeyId: 3c:52:a7:d1:62:c0:52:46:24:67:fc:f9:5e:c6:36:19:ea:1c:1f:97
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 83:9c:04:f4:10:98:81:bf:4b:35:42:06:ee:f9:2d:94:a6:ce:d8:9d
Fingerprint (sha256): 6e:94:2d:1a:b7:c5:cf:2a:ce:87:21:b6:52:d0:9a:95:f1:20:1b:b9:78:e8:41:ec:21:6a:ba:8e:b4:f7:17:b6

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate ss023.securesite.ne.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ss023.securesite.ne.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ss023.securesite.ne.jp

Other certificates including the domain name securesite.ne.jp

(limited to 100 certificates)
ss012.securesite.ne.jp
vs011.securesite.ne.jp
ds014.securesite.ne.jp
bs008.securesite.ne.jp
sd33.securesite.ne.jp
vs017.securesite.ne.jp
ds030.securesite.ne.jp
vs025.securesite.ne.jp
bs003.securesite.ne.jp
vs025.securesite.ne.jp
*.securesite.ne.jp
sd13.securesite.ne.jp
ds005.securesite.ne.jp
ss023.securesite.ne.jp
sd33.securesite.ne.jp
vs025.securesite.ne.jp
sd07.securesite.ne.jp
ds021.securesite.ne.jp
ds014.securesite.ne.jp
ss023.securesite.ne.jp
dv018.securesite.ne.jp
ss019.securesite.ne.jp
vs013.securesite.ne.jp
ds030.securesite.ne.jp
dv004.securesite.ne.jp
vs013.securesite.ne.jp
sd18.securesite.ne.jp
bs003.securesite.ne.jp
dv004.securesite.ne.jp
sd50.securesite.ne.jp
sd33.securesite.ne.jp
vs017.securesite.ne.jp
dv018.securesite.ne.jp
vs011.securesite.ne.jp
ss019.securesite.ne.jp
vs013.securesite.ne.jp
bs008.securesite.ne.jp
ssl.securesite.ne.jp
ss012.securesite.ne.jp
vs020.securesite.ne.jp
ss012.securesite.ne.jp
dv024.securesite.ne.jp
dv004.securesite.ne.jp
*.securesite.ne.jp
sd24.securesite.ne.jp
dv009.securesite.ne.jp
dv024.securesite.ne.jp
sd33.securesite.ne.jp
dv018.securesite.ne.jp
vs011.securesite.ne.jp
vs011.securesite.ne.jp
ss007.securesite.ne.jp
vs025.securesite.ne.jp
sd50.securesite.ne.jp
dv004.securesite.ne.jp
ds005.securesite.ne.jp
vs013.securesite.ne.jp
ss012.securesite.ne.jp
ss002.securesite.ne.jp
sd13.securesite.ne.jp
dv024.securesite.ne.jp
ss002.securesite.ne.jp
bs010.securesite.ne.jp
ssl.securesite.ne.jp
ds005.securesite.ne.jp
vs006.securesite.ne.jp
ssl.securesite.ne.jp
vs011.securesite.ne.jp
sd24.securesite.ne.jp
vs026.securesite.ne.jp
dv024.securesite.ne.jp
ss023.securesite.ne.jp
vs001.securesite.ne.jp
vs011.securesite.ne.jp
ss012.securesite.ne.jp
www.ss019.securesite.ne.jp
dv009.securesite.ne.jp
bs008.securesite.ne.jp
ss007.securesite.ne.jp
ss023.securesite.ne.jp
dv024.securesite.ne.jp
ds021.securesite.ne.jp
ssl.securesite.ne.jp
sd07.securesite.ne.jp
dv018.securesite.ne.jp
ss019.securesite.ne.jp
vs013.securesite.ne.jp
vs013.securesite.ne.jp
bs010.securesite.ne.jp
ssl.securesite.ne.jp
sd18.securesite.ne.jp
ss002.securesite.ne.jp
ss007.securesite.ne.jp
ds005.securesite.ne.jp
ds005.securesite.ne.jp
dv024.securesite.ne.jp
dv009.securesite.ne.jp
ds014.securesite.ne.jp
ds014.securesite.ne.jp
ss019.securesite.ne.jp

Certificate

The complete raw certificate details for ss023.securesite.ne.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8QErJyUYcFZyEEtXQ3/
b0aLcNvErX8hKn3j03y0vH2UgHg2gigp+cQhoVZ8x8PHLBo3J3DV60Sf3dnz+geE
Ag8Kz15SE+Ke6N816jsjQ1hn2F0VUJxEZrHeCbESws2ikh9QaXcNg6Lljti5nvSF
iQnGOW/V6LVOAZgXh3KjlUJA7s5QOAvs5PJXpcYK7+qiY4YGIlC7eAaSyve3//TL
bXIUMBGP9XNPWKCmVebcJ6vUAr8BPCBP3yx0mFewvMKtRAdpaR1BW5IhWhOgtNv7
F3feV2c6tHI7ma7Xc5Uygtg8NhtN54NgPGD4aQUD26xx74S5aO1CwjLIHy41YAiz
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1061414723216204137421524985
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-23 06:08:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-01 08:44:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ss023.securesite.ne.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25723036114121382035250614843214714550167674364595251307803168954560917249603379833886479379720382525744411028964631052132535000561211467616196930444597211719678756591974846339596183350542156390094294076676672977800412938764529585749735744386715636754658872834467254432716201120282737558274624952254429182045294568335620473509416001242270458472134438526462301918712856624469557146564489632177708814979819041944003867342563857049128389847406454744938705901312567335398065298412858322214896538742394367062607095243430188730043692786269648931483437170510063442780232130675983262581713663488578116030417689745294419866531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss023.securesite.ne.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c52a7d162c052462467fcf95ec63619ea1c1f97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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