assets.bandit.lab.zozo.jp

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 5c:95:23:bb:4b:ba:b4:96:0a:00:00:00:00:17:c2:6c was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assets.bandit.lab.zozo.jp

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:95:23:bb:4b:ba:b4:96:0a:00:00:00:00:17:c2:6c
Serial Number (int): 123063352567573556332445566359165190764
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fc:25:2f:79:3c:61:ca:6e:0b:41:ce:e9:f0:7f:e1:b5:0e:a8:0f:52
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): 62:73:4d:3d:6b:51:57:1b:4e:6e:18:31:a8:04:83:a8:80:49:d3:9e
Fingerprint (sha256): 86:74:9f:e6:bb:e9:2e:ef:7f:df:56:eb:c2:49:d3:b2:1f:4f:3d:78:d0:2e:20:55:a0:e4:71:9d:e0:5a:ab:f3

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate assets.bandit.lab.zozo.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.bandit.lab.zozo.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.bandit.lab.zozo.jp

Other certificates including the domain name zozo.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for assets.bandit.lab.zozo.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCDgVJm7bbsLBSJA60fr
aMECpPYbKvvk7owXNwldf/6g5SGlOo3YP7J15AYdZ4+HdpHPVvX4/Dr7OkP2qiNk
emhQ0TZpkr0zavs5RFpuNu8vUpA8JSxxB9wl4S+UG/9J/0wnVpAZhpBpWJk4ckzB
RqsGF8sTm1sTltT7LOAMETDi6kjkteDbKJ1LTRpMRrRfazLsHcjqiG6nlOyB6aPq
IpE4QmXIfG+y6LbDeGd2De+KJh10mPZHBRmcTwY5I4iFb0SVH5+XfRI0ZNnJHvDh
9t6SfgFOO5E5U/pkqc7J3GzDyUovrg8/sV2A+8Ui9jb1rSSy85am64rg5XcN97k+
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123063352567573556332445566359165190764
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 23:10:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 23:10:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.bandit.lab.zozo.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23244060017024191609686100650961482645784114181590865868809430902993830592960090454277598509238727913099230746710534243255938521472320839599181572298198248102561531606335962163175670456709359025935238840074666878965394024431415203460913379332109977949990222589439859849035255719004832681151574067903116596695921589780467279251165549899927725380908944689206110279864074818000033542766391320894499595571401803453245799249147319385341249205795563110758493063189497516244728176822350011087059198372740678956527836505943962839759815232863240409822874557116164998577329608723756320192747094745292323643471559771453476388607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc252f793c61ca6e0b41cee9f07fe1b50ea80f52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.bandit.lab.zozo.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170748801f40000040300483046022100dfe8848082a72f7906db703fb5338998ae140b04a773f7438d95422153e2df1f0221009749c8ae7aafdf8ed170380b282dd3530edf319add0ad66b84913c1ecd1dad9c0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001707488021a0000040300473045022100eaf461cdad53e998aff4e55d966f64a395f16893b6cb52053aa8698f8676e11a02203ae577d0d79cb780f6b677ac37a2c389515a94eb901ae2c702e86023a0b39135
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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