*.siteserve.jp

- Estore Corp -

Issued by CrossTrust OV CA5

About this certificate

This digital certificate with serial number 2b:b8:77:24:ae:a4:2c:91 was issued on by SECOM Trust Systems CO.,LTD..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Estore Corp

Organization: Estore Corp
Organization unit: System Operations Division
State / Province: TOKYO
Locality: MINATO-KU
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:b8:77:24:ae:a4:2c:91
Serial Number (int): 3150398938778184849
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 59:ac:1e:57:30:20:63:ea:45:f3:3a:8a:92:f7:e5:c6:9c:14:6b:6d
AuthorityKeyId: 24:b7:b4:41:d4:32:4f:c4:19:ff:5e:62:64:3b:5e:69:27:61:17:dc

Fingerprint (sha1): 41:40:d8:e5:59:05:19:5d:03:69:fe:ca:2a:a1:08:d5:2b:a0:61:3a
Fingerprint (sha256): a9:85:88:f8:93:e9:89:d2:f5:18:4a:b7:f4:b0:09:94:5d:ae:a0:31:4d:9b:d7:5e:21:9a:c5:0c:ae:24:bc:93


Revocation information

OCSP Server: http://ovca5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/xtov5/fullcrl.crl

Check the revocation status for certificate *.siteserve.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.siteserve.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.siteserve.jp
siteserve.jp

Other certificates including the domain name siteserve.jp

(limited to 100 certificates)
siteserve.jp
*.siteserve.jp
cart.siteserve.jp
siteserve.jp
cart.siteserve.jp
*.siteserve.jp
pup.siteserve.jp
shop.siteserve.jp
*.siteserve.jp
siteserve.jp
cart.siteserve.jp
siteserve.jp
*.siteserve.jp
*.siteserve.jp
siteserve.jp
siteserve.jp
*.siteserve.jp
cart.siteserve.jp
*.siteserve.jp
*.siteserve.jp
siteserve.jp
*.siteserve.jp
siteserve.jp
siteserve.jp
pup.siteserve.jp
siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
*.siteserve.jp
cart.siteserve.jp
cart.siteserve.jp
*.siteserve.jp
*.siteserve.jp
cart.siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
cart.siteserve.jp
pup.siteserve.jp
cart.siteserve.jp
cart.siteserve.jp
*.siteserve.jp
siteserve.jp
*.siteserve.jp
cart.siteserve.jp
pup.siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
pup.siteserve.jp
pup.siteserve.jp
pup.siteserve.jp
shop.siteserve.jp
pup.siteserve.jp
shop.siteserve.jp
siteserve.jp
*.siteserve.jp
siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
siteserve.jp
siteserve.jp
siteserve.jp
shop.siteserve.jp
shop.siteserve.jp

Certificate

The complete raw certificate details for *.siteserve.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDN16dptRZxXRrnIaPgp
SEPDeYopU7c4TRyBimzqIEn1lbWJfEd8SEn8CoP1eVklUmsOnBLvAyoClYNTl6vX
+1ipAjKX1wU1mrJ4ejv75Zhk+b6Fa1krn3CxmSeiFDk3KrQz6UQ2wbgKEsJg4KBn
+vFxnXVMKcvDpkv843QQXY7YAvzbkZcLKwNWqlofS68onqiMXYOxX5vsonYw0xeH
73dbWRJE8eQRW3hxOAVWLig2igrF6FV2FXcokmEHhcipkGdis+XYlzuc58YrC9Yb
NNec8MdMV1xKEUaEou1u3gncnWhKmFZkwHqY0o+f/OY8U2FHg9+Dc/YrJ53EfCPG
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3150398938778184849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CrossTrust OV CA5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 06:39:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TOKYO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MINATO-KU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Estore Corp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'System Operations Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.siteserve.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22243317841455569661030760379102733931016651790193103359446537216957883515919648518539607834494126124071700677133789836988827387966544159888029520370441442379861713097743943617033695173898543046496265885223159644341016963321953497684533524597400617192469390661927812128271889472507979669473462297738214402351975999956320475204246970852313551119465668915159210371921506679960404339577302520062196144237355188627813834887258351476389204173939780158868969377516667295582381173847778316092002402034464700509590719054595593047738048811068328369343413192398546616839951872623186960851320353005799835363652566166686383982313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 24b7b441d4324fc419ff5e62643b5e69276117dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ovca5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siteserve.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteserve.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.214.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/xtov5/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/xtov5/fullcrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59ac1e57302063ea45f33a8a92f7e5c69c146b6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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