DV SSL/TLS Certificate for gensen-fund.jp

Certificate is witin its validity period

Issued by Amazon (Amazon RSA 2048 M03)

About the gensen-fund.jp DV SSL/TLS Certificate

This certificate with serial number 03:a7:f5:a9:37:06:ad:7e:6f:9d:9c:0d:5d:99:21:60 for gensen-fund.jp was issued on by Amazon.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for gensen-fund.jp provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Amazon

Organization: Amazon
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 03:a7:f5:a9:37:06:ad:7e:6f:9d:9c:0d:5d:99:21:60
Serial Number (int): 4859780159672171799428646835022537056
Serial Number Length: 122 bits, 16 octets

Subject Key Identifier: 09:2e:46:11:f7:1f:8e:91:fd:67:43:c0:ce:db:cd:53:08:dd:ad:20
Authority Key Identifier: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (SHA-1): 6e:4f:34:bb:a7:88:6a:94:17:78:73:eb:6a:26:b4:d6:35:2c:df:37
Fingerprint (SHA-256): e0:c0:ae:48:ba:7e:01:fa:9b:90:50:a9:a2:8e:88:f3:14:dd:75:2c:a4:0b:15:14:ca:c4:75:89:14:f8:f8:88

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation Information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate gensen-fund.jp
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for gensen-fund.jp

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for gensen-fund.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6hHSI9Bf3bxrKVVDPmT
UOd7Gl6Y8b2Pd9ujczVV+pE/96Cdbw/G1gO27rGEZakDRY8RKaCN6qA3myFMSxYH
jULy4/QfJchv18ggKyk5SI4K3nrqZKfcqTZIpYBmZU6oq9LXumjKmywGtzdX2Yi8
1m6UcSnqFOwIMRseo+Dv55dXy/rVM+QJWJuqSFc4LIMncucVyOT8OuNgUcQI+K38
/ATi64zUzJ5gKb9KKbrXfFzbN0xRsSYd95N6uDYiueJIF+ANtAZQr5UAPUoTmD9O
x+/+TtMpgv7JT0wBVzXhhY75j5Fv31XLYLuyiqz0AWzXFHUUIiub9k/ZtsOMjN4a
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4859780159672171799428646835022537056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-12-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gensen-fund.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21669731346096991620587592596332717849271722204931291345136504468417625830498479264957697357276195825591684884098439241432717986256386065319809654205125698039502582636942817014567038239901275021880089484572486632764592008917466710219499187627230661703804934263371046018096086354868015348431990564079050756011970982143575068368459361392840719855318513502835069484968913769672277713118401185428649042089611647894384045871716534198087601949013588176029265843702499099691850265870161118192240668877428993292934182121095797638167960360211299901349285896474424415590378878981209438094784509475700935731966138193940265703953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							092e4611f71f8e91fd6743c0cedbcd5308ddad20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gensen-fund.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gensen-fund.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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