www.kyoto-happy.co.jp

- HAPPY COMPANY LIMITED -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 71:6f:a6:cf:a6:d7:cf:96:16:dd:9c:86 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HAPPY COMPANY LIMITED

Organization: HAPPY COMPANY LIMITED
State / Province: KYOTO
Locality: UJI-SHI
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 71:6f:a6:cf:a6:d7:cf:96:16:dd:9c:86
Serial Number (int): 35106784619123702197099797638
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 9c:cc:dc:19:05:90:34:df:17:59:ca:f6:45:7e:e5:bd:2c:b4:d1:1f
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 08:0b:4a:21:9a:f9:23:e6:0b:29:13:b5:58:36:26:2f:61:47:de:b7
Fingerprint (sha256): 89:f2:62:70:f3:fc:df:44:7f:86:03:75:1f:db:3c:53:f3:12:1a:e8:2f:e5:bb:6a:85:19:66:91:eb:17:e5:80

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate www.kyoto-happy.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kyoto-happy.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kyoto-happy.co.jp
kyoto-happy.co.jp

Other certificates including the domain name kyoto-happy.co.jp

(limited to 100 certificates)
img.kyoto-happy.co.jp
www.kyoto-happy.co.jp
img.kyoto-happy.co.jp
img.kyoto-happy.co.jp
img.kyoto-happy.co.jp
www.kyoto-happy.co.jp
www.kyoto-happy.co.jp
www.kyoto-happy.co.jp
www.kyoto-happy.co.jp
www.kyoto-happy.co.jp
www.kyoto-happy.co.jp
www.kyoto-happy.co.jp
img.kyoto-happy.co.jp
www.kyoto-happy.co.jp
img.kyoto-happy.co.jp
www.kyoto-happy.co.jp
www.kyoto-happy.co.jp
www.kyoto-happy.co.jp

Certificate

The complete raw certificate details for www.kyoto-happy.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUrODVmQvylOS1XL8GJs
FXSzXYkLhEipaOKeNuyEKqxDc1+tuIvcll5OHzUpoa3wavRw/xOgtqK2iNYJ/qR1
rBRMCgyo11eMk4x0JKpsXCPEb4NPEsqv8jxJ4DcLrg4Tih2tNxTXx1cX+ybGtZpd
1qaRKWYM2izjdjFMjWr7IKT9zBHPshOcJ/kwcigFDDA1luMOOssV+MbQ3eenOZsi
qckNPP1iUwwr87lGs0kxiifiQv2yXGTQuZXtGgCaVtG0f2BjeEgN7tGFpkYB1yFm
hRAH4Apn+Xjz8GgemplvZ7qyGv8XV+3jBb50AYaP02F1FHTvdMsuYrZjwLzQ/IUz
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35106784619123702197099797638
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-07 05:22:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KYOTO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UJI-SHI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HAPPY COMPANY LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.kyoto-happy.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20866207986073924440488680238592954047306788842171224474160135706106040850481644027190032616326222053934909859656945461248919761079977915975111126024490323472358393482115677835622396040077623258389261753632129781491858371953373351843089188264555611159923938953762224541217127919189049667913012752258629748652122867647612244225836778979856005157190334311714280080660479615264576599525184564204894904906935341222681533125914155234753880781816564607503227381153368433758784779680003668251141126583750943300412700924987728030970717402067049332384105386860509397080783730874770159067870081348715298859594303071387367322401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kyoto-happy.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyoto-happy.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cccdc19059034df1759caf6457ee5bd2cb4d11f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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