OV SSL/TLS Certificate for apisc.activityboard.jp Issued to Recruit Co., Ltd.

Certificate is witin its validity period

Issued by DigiCert, Inc. (DigiCert G5 TLS RSA4096 SHA384 2021 CA1)

About the apisc.activityboard.jp OV SSL/TLS Certificate

This certificate with serial number 04:63:d8:35:62:cd:ca:b4:80:10:bf:02:34:05:25:51 for apisc.activityboard.jp was issued on by DigiCert, Inc..

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for apisc.activityboard.jp provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 04:63:d8:35:62:cd:ca:b4:80:10:bf:02:34:05:25:51
Serial Number (int): 5835334602279931446845586746382820689
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 42:65:0e:90:de:9f:a1:c4:70:87:49:6a:d5:df:8f:33:0f:50:e9:4a
Authority Key Identifier: ae:ba:94:33:ba:ef:37:4d:0b:d7:18:ef:4a:e4:a1:0d:bc:07:b6:73

Fingerprint (SHA-1): b1:29:99:51:95:d4:16:c7:e8:47:de:22:8f:8f:61:9e:be:1d:e0:0a
Fingerprint (SHA-256): 11:af:71:93:d8:9f:a5:c9:fc:10:96:0d:93:d4:3d:ed:7e:ac:87:0b:1b:c2:c5:80:e6:70:f3:a2:ce:b2:e6:ec

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crt

Revocation Information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crl

Check the revocation status for certificate apisc.activityboard.jp
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for apisc.activityboard.jp

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

apisc.activityboard.jp

X.509 Certificate

The complete raw X.509 certificate details for apisc.activityboard.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7cMYIeR9yzaXefbmokb
RBSYeKm39ozvsQ2VmQP85DniR94sC4wMzIkb6+gT9YHYmLgZ4Pi5tNATFGaeFxOL
xsultmUzmL54D8YLr11HbRdGt1p8vj/yma+rBdHblCSsvX3+wtl1BFZCkB11M9bR
7sYjeVMBWYWFNjMeD4mLz9ezTX6onG2YH6izanph0haGOx8wlupOBpg1BpE/AaWt
nCaA2An1joG4daMTHtgPt7X1JUGY68ldaj6BdFB9JG+gYH34G3vCo+O8duwuJ6tg
xArwffIK54mJ9Rhsw+zZXeFD2bIq5ZohnBAIAZ+2ztahBFHn9N3UTQKFmS79sYE5
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5835334602279931446845586746382820689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert G5 TLS RSA4096 SHA384 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-04-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Recruit Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apisc.activityboard.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18142342114712042558200979342276719445087521751248266875720563316866906439486478411424094486315719312278673632640804592866670208351234093480671024707076410840608643586527685537178620078610711950264007814404051165841024573571908022061879887736672322430902187110204701523398503980014594670510387435785781602574502840764733095470618308130416263659017560491437777202235254930241007879015524631858157727213005961779044960434772716247758572994093925044293097112413765192929540331767050231879707540273679967341368595129725659498407932644018941830012112271484970055818379186954203083530840944541980622295695347851738447165877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aeba9433baef374d0bd718ef4ae4a10dbc07b673
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42650e90de9fa1c47087496ad5df8f330f50e94a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apisc.activityboard.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertG5TLSRSA4096SHA3842021CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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