reg3.tok.tnc.ne.jp

- TOKAI Communications Corporation -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 53:63:f2:32:a2:af:ba:c1:88:c8:fb:54:7f:18:41:25 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

TOKAI Communications Corporation

Organization: TOKAI Communications Corporation
State / Province: Shizuoka
Locality: Shizuoka-shi
Country: JP

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 53:63:f2:32:a2:af:ba:c1:88:c8:fb:54:7f:18:41:25
Serial Number (int): 110844873394024190343434265395639894309
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): fc:73:a9:4b:0a:63:20:1b:18:2b:dc:33:bd:43:f2:4f:05:2b:33:b2
Fingerprint (sha256): d4:65:d7:f5:87:46:9c:57:9c:14:80:f3:a7:b6:c4:e6:e7:72:c2:42:e0:f3:09:7a:78:dd:90:23:97:2f:c3:fb

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate reg3.tok.tnc.ne.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reg3.tok.tnc.ne.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reg3.tok.tnc.ne.jp

Other certificates including the domain name tnc.ne.jp

(limited to 100 certificates)
reg3.tok.tnc.ne.jp
mconfig.tnc.ne.jp
web2.tnc.ne.jp
www.tnc.ne.jp
pocketbbs.tnc.ne.jp
member.tnc.ne.jp
reg2.tok.tnc.ne.jp
reg5.tok.tnc.ne.jp
cs.tnc.ne.jp
www.coupons.tnc.ne.jp
member.tnc.ne.jp
speed.tok.tnc.ne.jp
partner.ser.tnc.ne.jp
speed.tok.tnc.ne.jp
reg3.tok.tnc.ne.jp
www.tnc.ne.jp
*.tok.tnc.ne.jp
cs.tnc.ne.jp
mguard.tnc.ne.jp
partner.ser.tnc.ne.jp
*.tnc.ne.jp
pocket.tnc.ne.jp
reg4.tok.tnc.ne.jp
reg3.tok.tnc.ne.jp
*.tok.tnc.ne.jp
speed.tok.tnc.ne.jp
reg3.tok.tnc.ne.jp
web1.tnc.ne.jp
orb1.tnc.ne.jp
www.tnc.ne.jp
*.tnc.ne.jp
pocketbbs.tnc.ne.jp
cs.tnc.ne.jp
reg5.tok.tnc.ne.jp
pocket.tnc.ne.jp
www.coupons.tnc.ne.jp
mconfig.tnc.ne.jp
reg4.tok.tnc.ne.jp
reg2.tok.tnc.ne.jp
reg4.tok.tnc.ne.jp
mconfig.tnc.ne.jp
*.tnc.ne.jp
partner.ser.tnc.ne.jp
www.tnc.ne.jp
reg4.tok.tnc.ne.jp
pocket.tnc.ne.jp
pocket.tnc.ne.jp
reg2.tok.tnc.ne.jp
www.tnc.ne.jp
wm.tnc.ne.jp
web2.tnc.ne.jp
reg4.tok.tnc.ne.jp
partner.ser.tnc.ne.jp
web1.tnc.ne.jp
pocketbbs.tnc.ne.jp
mguard.tnc.ne.jp
web2.tnc.ne.jp
reg3.tok.tnc.ne.jp
member.tnc.ne.jp
speed.tok.tnc.ne.jp
reg2.tok.tnc.ne.jp
reg4.tok.tnc.ne.jp
reg4.tok.tnc.ne.jp
web1.tnc.ne.jp
web2.tnc.ne.jp
reg5.tok.tnc.ne.jp
*.tnc.ne.jp
reg3.tok.tnc.ne.jp
pocket.tnc.ne.jp
mguard.tnc.ne.jp
*.tnc.ne.jp
mguard.tnc.ne.jp
wm.tnc.ne.jp
reg2.tok.tnc.ne.jp
mguard.tnc.ne.jp
wm.tnc.ne.jp
reg4.tok.tnc.ne.jp
partner.ser.tnc.ne.jp
pocketbbs.tnc.ne.jp
*.tok.tnc.ne.jp
web1.tnc.ne.jp
*.tnc.ne.jp
speed.tok.tnc.ne.jp
coupons.tnc.ne.jp
reg3.tok.tnc.ne.jp
pocketbbs.tnc.ne.jp
reg3.tok.tnc.ne.jp
reg4.tok.tnc.ne.jp
wm.tnc.ne.jp
reg2.tok.tnc.ne.jp
pocketbbs.tnc.ne.jp
wm.tnc.ne.jp
pocketbbs.tnc.ne.jp
pocket.tnc.ne.jp
partner.ser.tnc.ne.jp
reg2.tok.tnc.ne.jp
pocket.tnc.ne.jp
reg2.tok.tnc.ne.jp
reg3.tok.tnc.ne.jp
*.tok.tnc.ne.jp

Certificate

The complete raw certificate details for reg3.tok.tnc.ne.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyP3/e+X2tD6LcIyYW9N
4Mgek9q5wWck2sv8p5Gfr9ZjDRoEZqGX3FsetwDm865+Djr905Kvx4p8l74QllGT
dvoFenqDM5Q9d6+AcQtTVjnyYy8N64P1SkmbPREMApsWwY7oKqTYpPa1a0XiLYgY
qvlDbgF5uVURmMrNiHUgJDNg7AkR4Pg/5G9g9FkJNYG4MuIvP+JmJ75YuYeqZXKP
ew8V52UZlvgmS+9EQVD0fCmTmHRRoKTj2ag7TkMQxd9/Ea/NEuZJ0Z2koN7SlCzF
EvM+wuuq4a+Isrmtsm4fHHMS2P3CQUyTMSPpkGrHZ/ocGr/niHOpglEXfgJvGEYV
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 110844873394024190343434265395639894309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shizuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shizuoka-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TOKAI Communications Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'reg3.tok.tnc.ne.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22614393425079998485155429449521006856367171903389168350439557719944695809115754339664337177121265469332326664137538313242077005465654340512367236483441546058221786570315582420782869861388368844140498727202942912862927866809737915105558673020229024731045761844450631492677479575356184258228745142282316196606759612738681412268233805095206611201656781588463000899017555821738276689100666916954886563251693097246714995098626877862716691298622496434636665042555481484435743117281072701571853245539003535553079431152172566761522966364991739264978053120134426896172077821417830566301776780574491116110307857340645299852677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reg3.tok.tnc.ne.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000156fe198a620000040300473045022100c5031bd8767cf6f11cfe2d2abc9542fa6ed7e3a10f508aef259e71e46955abcd02201f14b9e5382d4d1daedc6c35b5c0ed9a13a366c6b0d681095344a3568d8edae7007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000156fe198c250000040300473045022100daa1f54b3cc0875876ecefed005843445c621ffe693a45d0645e5eead67b51a602207ada5b444ac15f285111f406aa6755eb12fdc80f50d281ae054345a85987fe9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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