adastria.co.jp

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:9b:78:77:48:66:1e:f1:0b:c0:2e:7d:a7:4b:dd:a5 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=adastria.co.jp

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:9b:78:77:48:66:1e:f1:0b:c0:2e:7d:a7:4b:dd:a5
Serial Number (int): 18087213297986959286322838841078832549
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 04:b0:2c:16:3f:6f:2d:68:da:47:c4:76:e0:31:24:f3:ae:1c:16:90
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): e9:87:68:76:eb:61:06:8d:6e:1d:b7:31:3a:ac:57:99:f2:f7:ab:0e
Fingerprint (sha256): 6e:aa:d3:1e:cf:87:85:01:a2:43:22:31:e2:60:8a:54:52:b5:f5:85:33:f8:26:3b:73:d3:08:f7:8f:66:3c:30

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate adastria.co.jp

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adastria.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adastria.co.jp
adastria-gs.co.jp
www.point.co.jp
studio-clip.jp
point.co.jp
nikoand.jp

Other certificates including the domain name adastria.co.jp

(limited to 100 certificates)
project-a.adastria.co.jp
collabo.adastria.co.jp
act.adastria.co.jp
test.adastria.co.jp
waribiki.adastria.co.jp
stylelab.adastria.co.jp
www.hillsshiresymphonyorchestra.org.au
*.coredb-prd.adastria.co.jp
stylelab.adastria.co.jp
www.moonlocker.org
pf3.eggs.or.kr
adastria.co.jp
qcs.adastria.co.jp
*.coredb-dev.adastria.co.jp
emvento.com
act.adastria.co.jp
www.coffeemeetspolished.com
www.yatribuddy.com
ad-portal.adastria.co.jp
nordahl.vetspire.com
jpp-tableau.adastria.co.jp
jamesstuddart.co.uk
project-a.adastria.co.jp
adastria.co.jp
polytangle.com
dev-twec.adastria.co.jp
*.coredb-prd.adastria.co.jp
mereaux.org
collabo.adastria.co.jp
dev-twec.adastria.co.jp
api.outerspacepark.com
stylelab.adastria.co.jp
adastria.co.jp
www.moreflux.com
recruit.adastria.co.jp
playfashion.adastria.co.jp
turlockjournal.column.us
adastria.co.jp
jpd-spllbalb05.adastria.co.jp
recruit.adastria.co.jp
adastria.co.jp
waribiki.adastria.co.jp
www.mh-integrity.com
nordahl.vetspire.com
waribiki.adastria.co.jp
www.adastria.co.jp
jpd-spllbalb03.adastria.co.jp
waribiki.adastria.co.jp
*.coredb-dev.adastria.co.jp
act.adastria.co.jp
test.adastria.co.jp
www.viraeshop.com
adastria.co.jp
jpd-spllbalb02.adastria.co.jp
adjust.adastria.co.jp
waribiki.adastria.co.jp
adastria.co.jp
*.pst.gec.adastria.co.jp
adastria.co.jp
waribiki.adastria.co.jp
www.adastria.co.jp
adastria.co.jp
jamesstuddart.co.uk
recruit.adastria.co.jp
sale.adastria.co.jp
waribiki.adastria.co.jp
5second.com
*.dev.gec.adastria.co.jp
playfashion.adastria.co.jp
act.adastria.co.jp
sale.adastria.co.jp
digitalsoul.report
www.adastria.co.jp
npsimg.adastria.co.jp
portal.adastria.co.jp
asc2020.adastria.co.jp
ismailhsici.com
stg-playfashion.adastria.co.jp
jpd-tableau.adastria.co.jp
portal-tst.adastria.co.jp
adastria.co.jp
stg-playfashion.adastria.co.jp
citycraft.io
*.coredb-dev.adastria.co.jp
csr.adastria.co.jp
stylelab.adastria.co.jp
www.adastria.co.jp
www.adastria.co.jp
collabo.adastria.co.jp
www.adastria.co.jp
www.adastria.co.jp
portal.adastria.co.jp
pass.kitomer.app
alc.adastria.co.jp
waribiki.adastria.co.jp
www.adastria.co.jp
act.adastria.co.jp
playfashion.adastria.co.jp
www.adastria.co.jp
act.adastria.co.jp

Certificate

The complete raw certificate details for adastria.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzNbyXq3OmjgIMENsUxA
glPjqY9p6vIr+DHoVB8vPu1xoE5d37hoG058qFE+sKT/MWu+SWsUOw3PE798iXXZ
hX3egSbVDrg+Kae46gYf79wMoFsMXYBZFh2w6EyytzkG5gdw7wEstxmVvUh3bLPp
VyfaWAmZn6wcQ2E05iGqHfGCW9q51NHb0crFl0B9C1u8A3qQ5fCgemdxFVIsv7HQ
eigsnrriovHeGXz3+3G2m3rtTDhbg4lvNOr93zRqJ+SmmwMSnIuC8zMbzXNJ9rq5
3JMo8WCcLKHuWnbfIvtVF1ZFzQZCORdObrjsznkRPJq5YxNGlfhcxGDSmKFDITVf
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18087213297986959286322838841078832549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adastria.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22117029210560553599582013900007004462019315146538909765951190353485950659241244800665409500803956961517134970590131244930570561923505344647090212819746654988893309587662403350746545773833802477554811297735494338537652249414762520332715701733813421335440361709349037787170058956869196779436259124074754330704822857477028754675723273459029121374154978588148252908640818263639940846584153440283243277427239578167996334939343878499217886246156110581585452000661764488282990666008947830880780007218023213755132676770470979677047083443318127374309384766933244740559711142513862647189078020754711912125937901195220917509979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04b02c163f6f2d68da47c476e03124f3ae1c1690
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adastria.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adastria-gs.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.point.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio-clip.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'point.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikoand.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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