scope.ne.jp

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 09:30:96:b0:53:01:d3:61:62:ec:f6:ee:9b:db:cc:83 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=scope.ne.jp

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:30:96:b0:53:01:d3:61:62:ec:f6:ee:9b:db:cc:83
Serial Number (int): 12215338542560527800172395710950132867
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 77:f0:4e:03:19:3d:fc:15:3d:db:1f:d3:be:28:ef:ae:ea:11:ff:5e
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): b6:15:89:9d:0d:44:69:00:97:5c:71:2d:fe:e8:a3:55:0b:16:79:41
Fingerprint (sha256): 98:99:cb:9e:11:5c:9f:9b:54:2d:71:04:f0:92:fa:cc:c4:93:7f:98:37:4e:39:23:91:36:8e:19:5a:38:18:3b

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate scope.ne.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scope.ne.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scope.ne.jp

Other certificates including the domain name scope.ne.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for scope.ne.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49dii001pS9843bu/Qzo
96cNFUQNdyN0peqNtRKP/QrPpoQB29oiHz1LeCQOy1g2i4h1vx9XH9ZD9pqyHQuK
I2/zZwwRH9n/jIgJq0Ad8zCR+a+YJihTwAX8FE1plh5pIr2MBDXsTWn5l6/R2HJk
ZWY0Wm4FzKah/ur7nd21DNKBdQRdAbNMn+5ldF56N4sb99rtj16f/Eae3sJs2EI0
A97/qHXYtSvjFjjwAT9nWB2OIv0Va0PNj0my20Jki5+DdyO33uxoq3hw6GysvYYz
B0a7OU3YFLo4PGCOjmpkOGQBREhWJjYNVlcV8Ogur4aQ6hldDmaPmZOlKMv27O6s
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12215338542560527800172395710950132867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scope.ne.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28762305498770490360556360656027620089139204869417813908174325135213326323705553435768965484093815672083190990833125548970823416112839259529317040750097230846295384162138598795121633264027018153261918102391651154607181171479325354270208585745305214162524297434390000770073560138528887693317517864257994325222934982633457450908543823190845398367679235771428256984947429985113374446138822793072534086468099628795382862210077683456135761187911483900774291685926841216102799586203306234145258710095305503210313240063459005606052985783507139469848989992806084939442830160020539885216883055402142188058175223503061372546081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77f04e03193dfc153ddb1fd3be28efaeea11ff5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scope.ne.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00bc1ec5b962e348305456c0f62b2144a5247c0a157e34efc4824e60dc5ba6b2488d98b5e0a54e4c0346c17d81017e5d37d1b18519c986da433ed18cca671fb304068c607af7c9d7f4606bfd8a66aeef3aa74825a6745fd3af892746d9bad26fd1dccf7701d8215132a82f2a21b49a47df9a41b49df555803afa7f715df7b97b0a4eda33475fa32f29bef2e0745ff717469856c8ac681fe979590e921dcf2afacb53f29920f54c93bf91c4a3a457bf8158692fd1fd91249fc2b0b9eefb60290193b3e6f479dc2fc1224e6313c76ba0073ce4489cf321f199276885d15bbf7299a995eaf2acba244294dcd9343489ea12d997514efba3015f752dfa3d62f538ca61703c131dd1bc5baf4b639227df2021ef513f977e08ace7231e245c7293db9a46574b78b188b191717976ca624e35983b7ad80a036e2e0ab26717f273c2b06800954e8a5fbe603833cc63ddfab330c99d49b4ae01c1d1873bed6c574f900339cb21d44f4f5f6bb4626176da491140677f3412cfb645c98aa941ffaa2790c5f0a3574025432e3f60c55a0635ef3278915573f499d3d4a12a9b17429b8aef58bf72a534ffa86955a51771dabaf286f69e7ff7fa242290d96a23e36e0a16d966b9c042448eadeb2c5c604073f6aefc010f1dfd3324497a4d23020019abbe57e6f4468395baf57fcb07f9364df3182da8ad06fa4128f62bc83dec9f7b1ad599d46d34