www.crecos.co.jp

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 64:c2:24:83:bd:1d:6b:d6:9c:a2:ed:10 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.crecos.co.jp,OU=Domain Control Validated,C=JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 64:c2:24:83:bd:1d:6b:d6:9c:a2:ed:10
Serial Number (int): 31183205026483768512538144016
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: ed:d0:fb:02:8b:6c:92:56:ee:86:22:69:d9:8a:cf:a8:be:2f:1f:27
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 57:4b:90:d4:05:18:62:51:2e:4d:e6:bd:16:70:b1:a1:38:ff:fe:54
Fingerprint (sha256): c9:33:44:f6:1c:d7:f2:91:1f:78:9d:de:5f:f4:bc:34:ed:b8:16:b0:e5:17:cf:5e:13:13:c2:48:50:40:d3:d4

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.crecos.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.crecos.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.crecos.co.jp
crecos.co.jp

Other certificates including the domain name crecos.co.jp

(limited to 100 certificates)
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp
www.crecos.co.jp

Certificate

The complete raw certificate details for www.crecos.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDlqY0MONp4jFSCpizJR
NCB2ix8y5x3e6SnkKf5UmStnD/QABEolKFwiP4U+pzEzJrrWwf3DiLAQavikqxyt
KQt9o+lBLqXon85rSzkYFgjJU9NxkwQMatHoULjPbNdpgHZfjWXlNi1GAXNOJJF6
jKtTVQu9ngvk1T0dr1novfUL34X7SSpF4U4MULV+sSZyrFmDO2Akb7OTw9KMmr0m
SV4bfKzXQTVNZiwfgqcy68ZRrgR0UNx/sb6tW8Ik3Ucpiv4CnGUfTDU/6Iz4ijWC
vqMGetEMYZF33CZJcNKnV+yk+yQKwof2ug8lkhkHqEfXidWh+COSwU9d038lzRdt
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31183205026483768512538144016
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-05 04:17:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-18 01:07:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.crecos.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25780926889380217681471316752273438580571801698168502333942965746089649489584670298502067957524832547547012057491226081030709625523086999789638014711998736999121684015162776351941640578998432435964033361934718202760055382162766178308364720639473983877417067882817811626068801119399552067921244458148297946639293837368741825347968087486623624117314133989743356387843471900840020733438207875797505807643580372380820981508548363551393274913706505183932688670278221590062378294267109907616431887583885473372804526102519239592706659050903120636918206912277139906080207407032482338571739738297148970275656305731681979428241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crecos.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crecos.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edd0fb028b6c9256ee862269d98acfa8be2f1f27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							02570076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015b3c552cb0000004030047304502203d567f83fb775ce4860e4ffba78bb02bbaa0581d2369109b1485fc23d710cca6022100cf45f3f717fdca9ff0d28072baaf16ea7b6e999b4866fe4dac6c682c3bd00207007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b3c552ce60000040300473045022100f0b650bb5f58a1d04359d2fd96d7344b87a57b2a01530752227ab65434e7601c022032750ac95789931143794d4e428e90714b6aad460540fc7ece299157d4dcd22b007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015b3c552d94000004030046304402202ec174098dde10247defef53c244e611e007efb0de53a22e1034af4c3f77e1d5022013f8c6c326f3c8161f678193fb09e3cb57d7397657e1370dc0547562b1196c61007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b3c552d100000040300473045022100f75b0268f907adb647c706136b0e6db90423d9058f87466a12a557911143eb1a02202a7b4a999de3e6da21cf487cf341029f268003b7e8759c96b505a6c17d1bdc8f007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015b3c552fc90000040300473045022100c6bde71e4f84c9d7a57a284f74338cc2e3ea888a43be33a3a120a92d8a0fd824022008aa7c2c09d7e4d3731a499a8974875f16f0b928d849d87041d593c253d96629
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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