kscan.jp

Issued by JPRS Domain Validation Authority - G4

About this certificate

This digital certificate with serial number 1d:6e:fa:dd:40:f1:70:ab:28:82:27:d6:2a:78:93:83 was issued on by Japan Registry Services Co., Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kscan.jp

Japan Registry Services Co., Ltd.

Organization: Japan Registry Services Co., Ltd.
Country: JP

This certificate will expire on

Certificate Details

Serial Number (hex): 1d:6e:fa:dd:40:f1:70:ab:28:82:27:d6:2a:78:93:83
Serial Number (int): 39123852664125143736824821673744700291
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: ed:fb:00:2b:b4:fa:93:b2:6b:90:22:8c:d5:25:9d:ed:f2:69:4c:94
AuthorityKeyId: 7c:24:ce:0d:a4:38:2d:c7:b3:63:5e:a7:78:7a:8d:1d:4c:2e:c7:15

Fingerprint (sha1): 54:2b:ea:67:5b:a1:96:f9:ca:c5:97:f6:34:01:db:76:a6:51:ce:bc
Fingerprint (sha256): d4:b6:4a:93:55:08:d8:b7:b8:69:32:1e:2f:77:3e:62:24:99:08:bb:3e:a4:b5:3e:6f:0b:3d:89:d2:d4:2a:ba

Issuing Certificate URL: http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g4/JPRS_DVCA_G4_DER.cer

Revocation information

OCSP Server: http://dv.g4.ocsp.pubcert.jprs.jp
CRL Distribution Point: http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g4/fullcrl.crl

Check the revocation status for certificate kscan.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kscan.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kscan.jp
www.kscan.jp

Other certificates including the domain name kscan.jp

(limited to 100 certificates)
kscan.jp
kscan.jp
kscan.jp
kscan.jp
kscan.jp
kscan.jp
www.kscan.jp
kscan.jp
www.kscan.jp
kscan.jp
kscan.jp
www.kscan.jp
www.kscan.jp

Certificate

The complete raw certificate details for kscan.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhg0bA2d7zjYwkAeGTch
uVcCwth9isqPw72u8gJCIGEUQrLRSCYK9UoCqGryIuuMtxusNqMb/7TUquf9lHL/
f6v/UXZXIp58XFMuefXa1bawAvrjwdKn95jrro7DXxeldDNAg9O5/nZnOOlJ7Lr1
71FLv4ct/hW+4Aq7sIpG89cxins6DUGmOMjO+wBbRspqOCg1TKpHPE32MbUiAeWk
QAGWji4ATnH3R2kodvbwHAbNWr387mJOX0jNCLMQULVuKy/NhrXxKqhFvhfZExQq
XGhHF6YPt8f1n60Yk/aS8/16dXU9F7p3tno7vtfRfmTe4juQpvojjCml40ajJ2Fm
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39123852664125143736824821673744700291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Japan Registry Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JPRS Domain Validation Authority - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 07:41:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-31 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kscan.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24502166982210907003904818974678000513704206517281406330039693825838681097513559050081982573033042916699206891786544960476241667635818116578958212005363222864818596725457037478288328240041458512415783240234772767605816925413254429947360506646492312488304400940273746001867739425415587254663286769376716761282497081991219267374583266998441693198556279154161287031729972239399362670909374903936378733050168494791297810008890829930939735918739042747641989663794807754368924589679145770365987616838156793564068501536501218257405051587711349842280576619128268305076807446179667499911793187284571274808637623058777457649293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c24ce0da4382dc7b3635ea7787a8d1d4c2ec715
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g4/JPRS_DVCA_G4_DER.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dv.g4.ocsp.pubcert.jprs.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kscan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kscan.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53827.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://jprs.jp/pubcert/info/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g4/fullcrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edfb002bb4fa93b26b90228cd5259dedf2694c94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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