*.nissen.co.jp

- Nissen Co., Ltd. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:0b:38:8a:2a:ba:7c:44:5c:ee:9c:13:15:38:da:b3 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nissen Co., Ltd.

Organization: Nissen Co., Ltd.
Organization unit: INFORMATION SYSTEMS
State / Province: KYOTO
Locality: Kyoto-shi
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:0b:38:8a:2a:ba:7c:44:5c:ee:9c:13:15:38:da:b3
Serial Number (int): 16008997976510922490245597201035745971
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 60:dc:52:79:06:f0:cf:17:35:1c:72:95:60:28:89:c5:d4:13:89:91
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 1f:7d:78:e9:dc:7c:da:73:a8:4c:66:4b:37:74:ad:4a:04:e9:24:cf
Fingerprint (sha256): 73:0b:d8:7a:d1:da:f7:5f:47:65:50:2b:9b:ef:c2:a6:1b:40:b5:2e:e1:f2:09:82:b9:c8:8d:79:e9:31:09:98

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.nissen.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nissen.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nissen.co.jp
nissen.co.jp

Other certificates including the domain name nissen.co.jp

(limited to 100 certificates)
gs4.nissen.co.jp
*.coin.nissen.co.jp
present.nissen.co.jp
fs.nissen.co.jp
*.smile.nissen.co.jp
w.nissen.co.jp
*.coin.nissen.co.jp
sp.nissen.co.jp
www.nissen.co.jp
info.nissen.co.jp
*.nissen.co.jp
www.nissen.co.jp
*.notification.nissen.co.jp
koiran.nissen.co.jp
gs4.nissen.co.jp
*.nissen.co.jp
csweb.nissen.co.jp
info.nissen.co.jp
m.nissen.co.jp
stg07.nissen.co.jp
*.nissen.co.jp
h.sp.nissen.co.jp
sp.nissen.co.jp
hybrid2.nissen.co.jp
kiap.nissen.co.jp
h.nissen.co.jp
gapi.nissen.co.jp
www.nissen.co.jp
www.nissen.co.jp
info.nissen.co.jp
m.nissen.co.jp
www.nissen.co.jp
h.sp.nissen.co.jp
www.nissen.co.jp
m.nissen.co.jp
stg20.nissen.co.jp
m.nissen.co.jp
www.nissen.co.jp
fs.nissen.co.jp
*.nissen.co.jp
happy.nissen.co.jp
*.nissen.co.jp
coupon.nissen.co.jp
www.nissen.co.jp
www.nissen.co.jp
gapi.nissen.co.jp
koiran.nissen.co.jp
sp.nissen.co.jp
w.nissen.co.jp
www.nissen.co.jp
hybrid2.nissen.co.jp
*.smile.nissen.co.jp
*.nissen.co.jp
w.nissen.co.jp
w.nissen.co.jp
m.nissen.co.jp
gapi.nissen.co.jp
stg20.nissen.co.jp
www.nissen.co.jp
gs4.nissen.co.jp
x.nissen.co.jp
m.nissen.co.jp
*.nissen.co.jp
x3.nissen.co.jp
m.nissen.co.jp
*.nissen.co.jp
*.coin.nissen.co.jp
wwbsll.nissen.co.jp
w.nissen.co.jp
*.nissen.co.jp
*.nissen.co.jp
*.smile.nissen.co.jp
m.nissen.co.jp
*.nissen.co.jp
*.nissen.co.jp
*.nissen.co.jp
koiran.nissen.co.jp
present.nissen.co.jp
stg07.nissen.co.jp
m.nissen.co.jp
*.nissen.co.jp
gs4.nissen.co.jp
present.nissen.co.jp
h.sptest.nissen.co.jp
hybrid2.nissen.co.jp
gapi.nissen.co.jp
gapi.nissen.co.jp
happy.nissen.co.jp
coupon.nissen.co.jp
*.nissen.co.jp
www.nissen.co.jp
gapi.nissen.co.jp
present.nissen.co.jp
fs.nissen.co.jp
m.nissen.co.jp
stg07.nissen.co.jp
info.nissen.co.jp
*.nissen.co.jp
happy.nissen.co.jp
x4.nissen.co.jp

Certificate

The complete raw certificate details for *.nissen.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iYQ3D/X27j/giwShcb2
x7hMvUhdEl022VM7nOwy8ywQwVqTJySeaPfsbuEMRX82SGVPVXKcXGyMW8yyqB61
6VGeDGb1y+axSlx0xHkKO8FBXEFLdIhO7Lm5YwtOX0Jxw4EETZN20ZUK+yUe5TG2
/DXhURX5n++YSJkOhKWOzVfO5kzn3ZdZIo2lj7IalKhXGDIri0mKKndSGLnGN8xU
lqX8uW2Yk+jjCvnVcFjIN40dKiGieSwPqD2V8/UjuUXzhfcZziIaNvLWXpigSYEa
wB1TYPDQ+ohIRQHCjfGvrshHhSd/tON6CIX0SeXfWUGhNitDUnIUNfYn0w1BxHbV
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16008997976510922490245597201035745971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KYOTO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nissen Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INFORMATION SYSTEMS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nissen.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28548627897863461252798605143593673490403488989784144746312300424397566679965871216145180193669945786307894974948230387259926391691392272845084674120013392697654912453549147218486668501605856363618537261028833314415984151006835874363183994263121655867259985109219196291526598327006237364158241354844845918266676447104789502950496256290441350879491032776655500615667551098832315486285702262680721966101617483497367590034700828758687537756057032636729727334812667323158257326255090403989039356775396654140236055114041724985898618059262235907723882793896408763320727349548872008237743390984071538341349372738746782766409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60dc527906f0cf17351c7295602889c5d4138991
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nissen.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nissen.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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