www.nks.co.jp

- NIKKEISHA,INC. -

Issued by Cybertrust Japan SureServer CA G4

About this certificate

This digital certificate with serial number 37:b4:d4:b5:73:c7:ac:bc:a0:1b:83:9e:ac:c2:e5:96:57:85:3d:78 was issued on by Cybertrust Japan Co., Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NIKKEISHA,INC.

Organization: NIKKEISHA,INC.
State / Province: TOKYO
Locality: CHUO-KU
Country: JP

Cybertrust Japan Co., Ltd.

Organization: Cybertrust Japan Co., Ltd.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 37:b4:d4:b5:73:c7:ac:bc:a0:1b:83:9e:ac:c2:e5:96:57:85:3d:78
Serial Number (int): 318027156080670621969461314682076274672133291384
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 71:7f:73:2f:9c:9f:33:9b:45:79:7b:79:f8:d0:73:2b:f3:95:07:94
AuthorityKeyId: 62:a7:d2:da:de:85:b6:92:f1:85:bc:f6:e8:95:9d:75:a0:fa:4e:1f

Fingerprint (sha1): ae:fe:c8:4a:c1:f9:90:f5:cd:12:4e:12:f8:60:2e:7c:a5:75:a5:50
Fingerprint (sha256): 9a:86:d4:53:00:6d:8b:8d:a7:f1:54:4d:82:04:30:89:82:3f:a3:cf:3f:99:22:c3:e5:b6:34:d5:70:f9:ee:54

Issuing Certificate URL: http://crl.cybertrust.ne.jp/SureServer/ovcag4/ovcag4.crt

Revocation information

OCSP Server: http://ssocsp.cybertrust.ne.jp/OcspServer
CRL Distribution Point: http://crl.cybertrust.ne.jp/SureServer/ovcag4/cdp.crl

Check the revocation status for certificate www.nks.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nks.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nks.co.jp
nks.co.jp

Other certificates including the domain name nks.co.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.nks.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVBzNopuM+/2uMAZDa0O
WPbyxa0TGlN4UurcwI+JGXNsyX18PFdd0TmzI61Tp1TFymCyshnmHU77/FxRNCd6
EnNbNwjKQphAbbQN59fco4j6wdLe8JeGH070001fuywUkoawKmeDIL+4abHIlDMf
UL7QQo9Vrsv+z9Wt3LNIaXYoB7kxW2IgM5WxDFNC5OmJW3fwR34v2Lp5c4S6lKZM
iH6ZE+rzuZ//KVuHtA1xl9v3fDe1elH39/Lwl0uhlKf1pxoyLq5b/MBfS6EwmUfP
bGJ2XdDgG6TVH0BrREy5ABgdldne77DFJvj8OzrZ3VWoTA+f/aHsfZIFX9VI8c4B
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318027156080670621969461314682076274672133291384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan SureServer CA G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-16 02:06:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-10 14:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TOKYO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHUO-KU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NIKKEISHA,INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nks.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24403664257158714527147225344734968972699104312565128327697307447227482545041851997237210459807717165594622569293275646772390253781477987696945875745723825434406461474316736255177899478306797198283186400895687667665857956759800135378602041131465782733181090517143463142650677518316304766079054119371975665955886859557163735273115737433050040673291653769592012464690795940321042130669495769705670197373128627356169416591295786885713645424712098678166555506410401917062498512825319858316369098619778599032539620944781754354422395026809691743037218193333668019099424524769564723946629814888277655774977635418593251164623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200081.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.cybertrust.ne.jp/ssl/repository/index.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nks.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nks.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssocsp.cybertrust.ne.jp/OcspServer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.cybertrust.ne.jp/SureServer/ovcag4/ovcag4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 62a7d2dade85b692f185bcf6e8959d75a0fa4e1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.cybertrust.ne.jp/SureServer/ovcag4/cdp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							717f732f9c9f339b45797b79f8d0732bf3950794
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							01de0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000176698ff23b0000040300463044022018cbd9b4618273b5498f7fcb116830b7bda1cfeed76d7707cc23e86e5f106ff30220571910031219e6228d9694bf24f70267a8cf54ad05d5f451960964810f95dd9e00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000176698ff9e1000004030047304502203e41ee815d31e4e9e83042c833a1a0f7f7547e786bf31e8f52684b1f6212acc0022100f51a31f81dbe2e1aea362905fb4d44fb78dfcdef90a730c892f1b2956fa176a00076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f0200000176698ffdc5000004030047304502200a076dd3fae5d3b16f92f23373047050389c29ff256331d29c1c3ae82c9d161a022100d1e9f7081f8ad228757b794a36bc600a1ccba97f5d818ab52564b02d3cbae221007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000176699001e0000004030046304402205256e8691ee91c4aeb483cef38aae4f1688ff65fe276214013d8d956f02e0d9902204fabe0b3bec5502145c7518dc5e964aa9940029c9d7ae7742776d1c25db62be3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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