www.g-m-t.co.jp
Issued by AlphaSSL CA - SHA256 - G4
About this certificate
This digital certificate with serial number 72:11:d9:0f:58:f0:17:a6:b3:64:d9:97 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.g-m-t.co.jp
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 72:11:d9:0f:58:f0:17:a6:b3:64:d9:97Serial Number (int): 35302867895203378623739648407
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 7c:1c:ef:c1:5f:29:22:f9:c8:46:dd:c0:81:72:ff:f0:c2:e0:ae:04
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15
Fingerprint (sha1): aa:60:25:1e:08:7a:91:81:dc:43:f4:40:37:c7:8a:7b:62:23:8b:54
Fingerprint (sha256): cc:20:a8:8a:a4:de:c2:92:f4:68:38:9e:29:6f:4e:7e:c6:71:49:59:35:5f:bf:0e:69:d2:5a:fc:48:06:2d:a4
Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl
Check the revocation status for certificate www.g-m-t.co.jp
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.g-m-t.co.jp
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.g-m-t.co.jp
g-m-t.co.jp
g-m-t.co.jp
Other certificates including the domain name g-m-t.co.jp
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.g-m-t.co.jp in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgIMchHZD1jwF6azZNmXMA0GCSqGSIb3DQEBCwUAMEwxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEc0MB4XDTI0MDEwMzIxNDAxOFoXDTI1MDIw MzIxNDAxN1owGjEYMBYGA1UEAxMPd3d3LmctbS10LmNvLmpwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndxXJCHJtWzZrZcUGpwqsh4GBs6ePJopzS0i nru2PZAtSd54G3sSMIDGa9AinYUgrnHQ7AeC3vHrbCdxLRuHKpWNVWh8BTyEcVWZ iV8GAnysXENNngnDxPM2jYBudzW5qS9nts1NEEXfHKmpGgzUs2Nkl+z6qTpuXNNn eWwunt+4AidWOU4teMsRS0yBzr1T1KmuMqO9oBsXKcb2Aa1Oe51NMSxHG8PeFtRO nGczvJCK11gsc4DNS8E5BbGotLcy90S717xSv1xSSES9nlQNnbabCzEPHI/FFAHi me4zQ87eVQ10BuczZjarEboLNyK92BcdjcHJ1eqzMAqSlJxYlQIDAQABo4IDXzCC A1swDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwgZMGCCsGAQUFBwEBBIGG MIGDMEYGCCsGAQUFBzAChjpodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2Nh Y2VydC9hbHBoYXNzbGNhc2hhMjU2ZzQuY3J0MDkGCCsGAQUFBzABhi1odHRwOi8v b2NzcC5nbG9iYWxzaWduLmNvbS9hbHBoYXNzbGNhc2hhMjU2ZzQwVwYDVR0gBFAw TjAIBgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZodHRwczov L3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzBBBgNVHR8EOjA4MDagNKAy hjBodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2FscGhhc3NsY2FzaGEyNTZnNC5j cmwwJwYDVR0RBCAwHoIPd3d3LmctbS10LmNvLmpwggtnLW0tdC5jby5qcDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUT8usqMLvq92D b2u/zpg9XFgldhUwHQYDVR0OBBYEFHwc78FfKSL5yEbdwIFy//DC4K4EMIIBfwYK KwYBBAHWeQIEAgSCAW8EggFrAWkAdgDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qH Mh39HjeOUAAAAYzRRSs2AAAEAwBHMEUCIQCsrPRYIFf/m5FE+WGA48MTip629Ty4 Oa6WXsFiUCQ+bgIgE4Dzcwy4Wt5fyhnNzNb9YCg/S0Uhq6i1Lg+JpHeZ3tgAdwBO daMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAYzRRSw/AAAEAwBIMEYC IQD72IBwmReojtEece6++HyP0+vdwW2xgHcsT1utZhjhwwIhAJMrtnyJ1BPoT8Br 1oVuAIDLT50/VXuQmE5Le2Qlzt+gAHYA4JKz/AwdyOdoNh/eYbmWTQpSeBmKctZy xLBNpW1vVAQAAAGM0UUr+AAABAMARzBFAiEA2YutLlfnbzpZAN/jviYvD0IyV5Pi 9Yj1k0KzKFldKwoCIFabBqXr7A6fAn5gK/zsERREcIAwQmggqPQ3vhyH3RxfMA0G CSqGSIb3DQEBCwUAA4IBAQCZV0FIr3OjsczoD0a1DqdjeT2rwiACI0WXxQa2CjWR FdxL3YWWlGN4GTE/ecR4rbJBk1rs6sxifpDCxeBxQWqFGYkjwucVIOlPANj8uQtB 7L0coedFSl0NFOsCV77w1JRFMv7hXvJKezfmj0B5D24INqQRVjyVuBLZFnFFu0dV qFJzXBy6hQeIOAS2llHGw6h4IJkYRVHn+M47lwNZsOrnXVzDLc7zX2L5wbd6Ose7 AmFQ+D3xLGnIZ/Fahy6wkwGlqZS9jwcSw2B3Vz4gzNcveTCIBwoZ1JLwdiacprGn SYL8q/8Dq5G+0QpZLEm/7Fuwz53Q73DcD97b3fEijwx0 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndxXJCHJtWzZrZcUGpwq sh4GBs6ePJopzS0inru2PZAtSd54G3sSMIDGa9AinYUgrnHQ7AeC3vHrbCdxLRuH KpWNVWh8BTyEcVWZiV8GAnysXENNngnDxPM2jYBudzW5qS9nts1NEEXfHKmpGgzU s2Nkl+z6qTpuXNNneWwunt+4AidWOU4teMsRS0yBzr1T1KmuMqO9oBsXKcb2Aa1O e51NMSxHG8PeFtROnGczvJCK11gsc4DNS8E5BbGotLcy90S717xSv1xSSES9nlQN nbabCzEPHI/FFAHime4zQ87eVQ10BuczZjarEboLNyK92BcdjcHJ1eqzMAqSlJxY lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 35302867895203378623739648407 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 21:40:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-03 21:40:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.g-m-t.co.jp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19928067778071561977119069426835385953852484365002825076025843119343713476028404305886238318901073125603078565803138019402897325271966684711492789598685889177435943381699180726991679477729405981598625719139403627648057300986240063989453510182753358139238004785996134956569992258034565146220018756066699253116998377707762235426813265783428604523908686477164416988362651195469212242902893826443860481940805113198740173878716013798603727735209623666327960278114312161959183073680986958422496445435291934365593691128076350134767341914903934973162171403476877059711379150637473104341566801450752628285412980355771932629141 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.g-m-t.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g-m-t.co.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7c1cefc15f2922f9c846ddc08172fff0c2e0ae04 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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