www.klab.com
Issued by FujiSSL Public Certification Authority - G2
About this certificate
This digital certificate with serial number 3b:06:93:37:a5:00:e3:15 was issued on by Nijimo, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
Certificate Subject
CN=www.klab.com
Nijimo, Inc.
Organization:
Nijimo, Inc.
Country:
JP
This certificate has expire since
Certificate Details
Serial Number (hex): 3b:06:93:37:a5:00:e3:15Serial Number (int): 4253248765298795285
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: b0:59:72:4c:0b:2d:2c:58:84:b9:15:9d:79:2e:4c:fc:79:91:85:ad
AuthorityKeyId: 3a:d8:5f:be:a9:00:13:54:3d:24:f4:82:34:5d:f7:02:2e:f6:da:53
Fingerprint (sha1): 58:e3:73:bf:cc:8c:81:36:2a:58:b7:89:36:14:c6:c2:82:58:e4:b6
Fingerprint (sha256): bf:44:87:e9:82:d6:46:44:e6:a9:39:72:07:f5:83:17:6c:ad:5e:b7:bf:c9:ef:41:e6:73:f7:0b:29:11:f8:ea
Revocation information
OCSP Server: http://nijimo2.ocsp.secomtrust.netCRL Distribution Point: http://repo1.secomtrust.net/sppca/nijimo2/fullCRL.crl
Check the revocation status for certificate www.klab.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.klab.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.klab.com
klab.com
klab.com
Other certificates including the domain name klab.com
(limited to 100 certificates)
*.klab.com
www.klab.com
*.github.jp.klab.com
www.klab.com
ask.corp.klab.com
www.hueimaging.com
iatl-upnvyk.org
klab.com
inquiry.corp.klab.com
next-admin.tapnotion.com
*.github.jp.klab.com
www.convo.com.ua
stg.klab.com
klab.com
*.klab.com
lp.corp.klab.com
github.jp.klab.com
github.jp.klab.com
github.jp.klab.com
www.klab.com
lp.corp.klab.com
github.jp.klab.com
lp.corp.klab.com
www.klab.com
lp.corp.klab.com
*.klab.com
github.jp.klab.com
ask.corp.klab.com
www.klab.com
github.jp.klab.com
lp.corp.klab.com
stag.patient.umasalud.com.mx
ask.corp.klab.com
*.pcms.klab.com
www.klab.com
ask.corp.klab.com
schoolchecker.co.uk
github.jp.klab.com
www.klab.com
s.klab.com
ask.corp.klab.com
klab.com
www.bittbook.com
www.decorarte2000.com
ask.corp.klab.com
stg.klab.com
*.klab.com
rentalsunited.mysmarthotel.com
ask.corp.klab.com
spanner.fyi
*.klab.com
faq.corp.klab.com
*.pcms.klab.com
www.klab.com
*.github.jp.klab.com
www.klab.com
ask.corp.klab.com
www.hueimaging.com
iatl-upnvyk.org
klab.com
inquiry.corp.klab.com
next-admin.tapnotion.com
*.github.jp.klab.com
www.convo.com.ua
stg.klab.com
klab.com
*.klab.com
lp.corp.klab.com
github.jp.klab.com
github.jp.klab.com
github.jp.klab.com
www.klab.com
lp.corp.klab.com
github.jp.klab.com
lp.corp.klab.com
www.klab.com
lp.corp.klab.com
*.klab.com
github.jp.klab.com
ask.corp.klab.com
www.klab.com
github.jp.klab.com
lp.corp.klab.com
stag.patient.umasalud.com.mx
ask.corp.klab.com
*.pcms.klab.com
www.klab.com
ask.corp.klab.com
schoolchecker.co.uk
github.jp.klab.com
www.klab.com
s.klab.com
ask.corp.klab.com
klab.com
www.bittbook.com
www.decorarte2000.com
ask.corp.klab.com
stg.klab.com
*.klab.com
rentalsunited.mysmarthotel.com
ask.corp.klab.com
spanner.fyi
*.klab.com
faq.corp.klab.com
*.pcms.klab.com
Certificate
The complete raw certificate details for www.klab.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfDCCA2SgAwIBAgIIOwaTN6UA4xUwDQYJKoZIhvcNAQELBQAwWjELMAkGA1UE BhMCSlAxFTATBgNVBAoTDE5pamltbywgSW5jLjE0MDIGA1UEAxMrRnVqaVNTTCBQ dWJsaWMgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMjAeFw0xODEwMzEwNjEy MjdaFw0yMDExMDExNDU5NTlaMBcxFTATBgNVBAMTDHd3dy5rbGFiLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKabTz5DyeFAWBfvafj+YPbrf8M8 zlmhECETYWEKeFGYkWb6xgSNflLtfWffhcZCEzlWLyOMppvgqDVSKdBtbdfX6Bq1 mjd4/HyHQKFeIq+4NMAOwzySxZE7InnlDWRKeVltS/nsbUE8Dytg9ebU4LO834pC ZzC5LPmD2xlD7sLUr0BNm7wxlT9Ky7JN1FXFYD/lOBqCP6Aww/ecAH7U+NjM+9Gh 2Xgcu5qP4jnGkMw9EvnvNzxZ7cW8L/gMwvBI5wXpdd4slZ3qCRlP3jL/HB/vXfAV 8cHpiR+h+DeNoj8+ujpOHvmyv+W+YuMMWwvyKdTO0Fox61589Tx5alvrRikCAwEA AaOCAYcwggGDMB8GA1UdIwQYMBaAFDrYX76pABNUPST0gjRd9wIu9tpTMD4GCCsG AQUFBwEBBDIwMDAuBggrBgEFBQcwAYYiaHR0cDovL25pamltbzIub2NzcC5zZWNv bXRydXN0Lm5ldDAhBgNVHREEGjAYggx3d3cua2xhYi5jb22CCGtsYWIuY29tMFwG A1UdIARVMFMwRwYKKoMIjJsbboFRAjA5MDcGCCsGAQUFBwIBFitodHRwczovL3Jl cG8xLnNlY29tdHJ1c3QubmV0L3NwcGNhL25pamltbzIvMAgGBmeBDAECATATBgNV HSUEDDAKBggrBgEFBQcDATBGBgNVHR8EPzA9MDugOaA3hjVodHRwOi8vcmVwbzEu c2Vjb210cnVzdC5uZXQvc3BwY2EvbmlqaW1vMi9mdWxsQ1JMLmNybDAdBgNVHQ4E FgQUsFlyTAstLFiEuRWdeS5M/HmRha0wDgYDVR0PAQH/BAQDAgWgMBMGCisGAQQB 1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBc4x0+IzypAcwzk9jFVGnf KfhjGjeepEccYPkb9o3D7/yUmWBdd/VgPqFvHRKmVG1FMglVMlPAkPMyHpB/BLfG U7Ev6MjYTrtXDObU3wIQxJ1nuzAd0o2gaB2JSPQ5rgvasfk8KsHuLntiNi/XbHuo 1Dj6x6aZIeMqn3Vi3pK5jd+YxXRxo6ZXGyvlCeZR1Wg3iUvM76YiPdNWZk7DLlaI Qx6pJnkM4x2S1oV9obW0P6TmE/aQFMyFGSWMoAhwVaPPUr0+jvXvd2jzHgoM1q4E XLOy/+7RnVvfHMKxs9d2E33OApHOnBcqehfoqWTZ0Z/bX6+DKKJywBWe+6O84ePP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApptPPkPJ4UBYF+9p+P5g 9ut/wzzOWaEQIRNhYQp4UZiRZvrGBI1+Uu19Z9+FxkITOVYvI4ymm+CoNVIp0G1t 19foGrWaN3j8fIdAoV4ir7g0wA7DPJLFkTsieeUNZEp5WW1L+extQTwPK2D15tTg s7zfikJnMLks+YPbGUPuwtSvQE2bvDGVP0rLsk3UVcVgP+U4GoI/oDDD95wAftT4 2Mz70aHZeBy7mo/iOcaQzD0S+e83PFntxbwv+AzC8EjnBel13iyVneoJGU/eMv8c H+9d8BXxwemJH6H4N42iPz66Ok4e+bK/5b5i4wxbC/Ip1M7QWjHrXnz1PHlqW+tG KQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4253248765298795285 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nijimo, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FujiSSL Public Certification Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-31 06:12:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-01 14:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.klab.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21032144614829939629372056479518529739870297949825998342552552464167189791193134979467530635850765317640806652824937418713401867634914575777400537757464445983549195886962593553626224595496074714616039964505823108782314606951685096281894284850393430633013859394423036089725563576261678464242714989011150949253901663038082578080859184601437083928923141191891436704191233662817490189976011473679873373948137580337453708890810900222083965488785613849451263235694343580150158303133035435796503470795656605206976137177709673098091096745513845400318064840920027892449738469340214410546265479009250405548784106053104787211817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3ad85fbea90013543d24f482345df7022ef6da53 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://nijimo2.ocsp.secomtrust.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klab.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.209.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nijimo2/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nijimo2/fullCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b059724c0b2d2c5884b9159d792e4cfc799185ad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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