OV SSL/TLS Certificate for img01.jalan.jp Issued to Recruit Co., Ltd.

Certificate is witin its validity period

Issued by DigiCert, Inc. (DigiCert G5 TLS RSA4096 SHA384 2021 CA1)

About the img01.jalan.jp OV SSL/TLS Certificate

This certificate with serial number 0f:5c:53:30:fd:88:7f:4c:b2:0b:75:02:3f:77:05:1f for img01.jalan.jp was issued on by DigiCert, Inc..

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for img01.jalan.jp provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0f:5c:53:30:fd:88:7f:4c:b2:0b:75:02:3f:77:05:1f
Serial Number (int): 20417798569172568560308546296467621151
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 25:d6:96:30:d5:1e:59:36:0b:17:1a:95:a8:0c:a5:73:cb:c8:12:6e
Authority Key Identifier: ae:ba:94:33:ba:ef:37:4d:0b:d7:18:ef:4a:e4:a1:0d:bc:07:b6:73

Fingerprint (SHA-1): d6:e4:3e:04:c4:b3:3a:ac:a4:ff:cf:b5:fb:67:55:da:a9:80:1e:75
Fingerprint (SHA-256): 71:f1:c2:44:b0:c4:ba:d7:ab:59:84:dc:06:fb:3a:03:45:9a:b8:c7:02:1b:0e:18:44:44:ec:01:62:a7:a8:15

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crt

Revocation Information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crl

Check the revocation status for certificate img01.jalan.jp
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for img01.jalan.jp

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

img01.jalan.jp

X.509 Certificate

The complete raw X.509 certificate details for img01.jalan.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWuvhd/1M+GKH/bjjLEu
0mbPD4Yn6LrVMfefW4uI7BgfjgEUyPxbR2cUVl6JnMg6w3m5LmpYbmADLuhQZ/VK
iSe0Y1btESwXgIQXu9lQuQE9/tt6q1cWKWLPvrLBHe4gMfun7RAA4z+6KUsN94F+
uCiVHCGM/F5OMCrYFKhWXINw6juDFNJ1VrLetbvuTS8wMFN/fWWdYDVezyJATeP/
23awR7rU2o76FCVqbrEWnlX84GvR38MVM7EjYd8gXbDc5YGF/7gKXaSihqUowkKd
xYezLcUINbKJ7HREDAO1Mv5kBI0C0SNbdaOcKITs+U+iNvWjUf0kUPnQCAXDYgVR
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20417798569172568560308546296467621151
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert G5 TLS RSA4096 SHA384 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-04-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Recruit Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'img01.jalan.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24417094624946217371981043153666022997132246375687687554918254909455735248021486297554339502903575709351883101239835155314922259708674516735514075828773448873786661472524824709119455953207838666125926911749058869842406867819751056515445372152704154193664957733585772054969064787042572490529770536256790077029223181452521939896652884186390712282627593858091011714334618925646042998042092281735452801591573885967548849585566228394807230143260921438458358855048777069803706702809838070719362412926196813758811500753251751913329580426439207553969074597286561002297294047938839606822251226095845675926774394624416814551437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aeba9433baef374d0bd718ef4ae4a10dbc07b673
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25d69630d51e59360b171a95a80ca573cbc8126e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img01.jalan.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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