ask.corp.klab.com

Issued by FujiSSL Public Validation Authority - G3

About this certificate

This digital certificate with serial number ea:9f:40:a1:76:3f:56:af:5d:be:f3:a7:85:69:89 was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Certificate Subject

CN=ask.corp.klab.com

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): ea:9f:40:a1:76:3f:56:af:5d:be:f3:a7:85:69:89
Serial Number (int): 1218227488596570129687109257948129673
Serial Number lenght: 120 bits, 15 octets

SubjectKeyId: da:e2:fd:e2:1e:30:60:3b:01:16:11:40:2f:33:5d:8c:13:0f:3d:cd
AuthorityKeyId: bc:eb:d9:11:e0:51:64:6f:ff:f0:74:4f:0d:5a:ab:4a:4f:2d:78:27

Fingerprint (sha1): 3e:15:3d:6d:c9:59:0e:23:5a:5c:62:d1:09:a1:52:b0:8f:ea:5e:32
Fingerprint (sha256): ad:0b:75:2c:4d:50:5f:c0:1e:52:f0:cb:1d:84:fb:1c:35:07:c5:fd:90:9f:a7:5f:43:b7:10:46:c2:95:98:9e


Revocation information

OCSP Server: http://nijimo3.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nijimo3/fullCRL.crl

Check the revocation status for certificate ask.corp.klab.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ask.corp.klab.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ask.corp.klab.com

Other certificates including the domain name klab.com

(limited to 100 certificates)
*.klab.com
www.klab.com
*.github.jp.klab.com
www.klab.com
ask.corp.klab.com
www.hueimaging.com
iatl-upnvyk.org
klab.com
inquiry.corp.klab.com
next-admin.tapnotion.com
*.github.jp.klab.com
www.convo.com.ua
stg.klab.com
klab.com
*.klab.com
lp.corp.klab.com
github.jp.klab.com
github.jp.klab.com
github.jp.klab.com
www.klab.com
lp.corp.klab.com
github.jp.klab.com
lp.corp.klab.com
www.klab.com
lp.corp.klab.com
*.klab.com
github.jp.klab.com
ask.corp.klab.com
www.klab.com
github.jp.klab.com
lp.corp.klab.com
stag.patient.umasalud.com.mx
ask.corp.klab.com
*.pcms.klab.com
www.klab.com
ask.corp.klab.com
schoolchecker.co.uk
github.jp.klab.com
www.klab.com
s.klab.com
ask.corp.klab.com
klab.com
www.bittbook.com
www.decorarte2000.com
ask.corp.klab.com
stg.klab.com
*.klab.com
rentalsunited.mysmarthotel.com
ask.corp.klab.com
spanner.fyi
*.klab.com
faq.corp.klab.com
*.pcms.klab.com

Certificate

The complete raw certificate details for ask.corp.klab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5z1DmK3r9HDAFEdGT51
PyNLUIGxpYh8ccYVnYki4UrGDmUOg55gWXXMRwFRTYedDs2m1m4IVJteGgrx8VJz
CTh0Gf9saaY15jkf104+zSc+4GIg0zSN2TC0pd4eUBfJJzAVLOjF5qY/B9xc4kbf
MOKQAkiH6Syzki2YKxK/Pkgx1RhFbR7HKKw+/j73LyvmHtP1bso0LxybaLU7hNnF
XlL1H2jOqg3KISXJEtk0c0ZHj7DWF8ugs731veOgrhIXsOytg424P4bu61GYgiHj
p250Zokcinia7UO/nUS7llQeXVDGedumUxHXwA84by+DLHzUt0PMRLI3y79XwGFb
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1218227488596570129687109257948129673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FujiSSL Public Validation Authority - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 08:52:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-13 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ask.corp.klab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23179008313818826060274927529263784839005012757263209822971696136191263805701255545141733197717880219223095221149805869410737966042510545259622686790804529300644822240307564682570030937190899424978793094598416569569104002522756887354811644074812779527152214951473218372100639066524135098607268018427315136784983352176697882459904588409392063474917571775718872622428032241029621677246016455737105517091810032116431685233888583155972224348087572736186845999565715747641690299006355326286833813597389997568387076732818199305605181960476838218604007562900366606301030294868576257195277236980283359501210029574000228784943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bcebd911e051646ffff0744f0d5aab4a4f2d7827
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://nijimo3.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.corp.klab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.213.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nijimo3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nijimo3/fullCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dae2fde21e30603b011611402f335d8c130f3dcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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