www.omusubi.co.jp

Issued by FujiSSL Public Validation Authority - G3

About this certificate

This digital certificate with serial number 22:26:8e:6a:45:7a:af:d4:44:fa:bd:e4:b5:2c:9b:db was issued on by SECOM Trust Systems CO.,LTD..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.omusubi.co.jp

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate will expire on

Certificate Details

Serial Number (hex): 22:26:8e:6a:45:7a:af:d4:44:fa:bd:e4:b5:2c:9b:db
Serial Number (int): 45393947659163193135314118579791371227
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 8f:88:66:e8:d8:cb:9e:ed:d2:c5:b9:de:a0:29:7e:46:d1:6f:99:ab
AuthorityKeyId: bc:eb:d9:11:e0:51:64:6f:ff:f0:74:4f:0d:5a:ab:4a:4f:2d:78:27

Fingerprint (sha1): 24:c2:c8:ad:24:64:28:3e:47:22:51:3e:53:49:25:3b:2b:c4:21:b6
Fingerprint (sha256): 9b:11:2a:d0:99:47:36:4f:8e:43:90:31:ea:63:0a:4c:92:24:29:bf:59:62:7c:25:3e:c0:80:55:55:f2:b9:f1

Issuing Certificate URL: http://repo1.secomtrust.net/sppca/nijimo3/ca-der.cer

Revocation information

OCSP Server: http://nijimo3.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nijimo3/fullCRL.crl

Check the revocation status for certificate www.omusubi.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.omusubi.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.omusubi.co.jp
omusubi.co.jp

Other certificates including the domain name omusubi.co.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.omusubi.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3ScSES3mBHJOmWpzIfW
6BUZ0QT1uWSeR8+/aWTj7fwLWb+5ZvVR/75KQi3JRfR54/P2K8I/xriaZd9ZuwE4
86Ovkoh+7VYKGQgtJ9RnOQYuiKaBx0N//qd+NYxaC1E5GBiniR1Z/DZxe1IQtTO2
HP7yarDgxHJgXKa4uqGMedkdGr4ulFZ0eRi9Z4my11csEeWTJ/9eKEmVOwIOeNQR
WZWgugAhDA7aMcZSv4yn2Zk9VJyaDCYDGinUcLMGtuYnlS2wJa0sy4glJHBmZoi0
LpDnWEuG4WHpzJ2zCyhlnfU1FL81sxLJvchMsaeO8dISE9c2enWnX1leSmr+HvTu
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 45393947659163193135314118579791371227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FujiSSL Public Validation Authority - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:37:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.omusubi.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21644252918921611199164101967554957889813160893536542796314086902987013405860794093267062664464647458524973520293489568719431549496450283789768562359726503937434306827383564596761072396707119004845568266871349324463953922199818941873466726358228118807391872291561593208996117896109278838308566046258066329614273462801826564016259543624912839300670117901971483292761260882000772122082403396277340291918652358159589248735802337232396174072180555630228493258704513722395986757762226199217639500424725353571751714379463578471723717900446577873065718715426162535620958800093849951550465803627296291604951950217804458028571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bcebd911e051646ffff0744f0d5aab4a4f2d7827
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nijimo3/ca-der.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://nijimo3.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omusubi.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omusubi.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.213.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nijimo3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nijimo3/fullCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f8866e8d8cb9eedd2c5b9dea0297e46d16f99ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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