*.portal2.e2r.jp

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 59:81:bb:21:30:c5:e3:6b:58:df:56:8f:fd:34:0b:49 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.portal2.e2r.jp

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 59:81:bb:21:30:c5:e3:6b:58:df:56:8f:fd:34:0b:49
Serial Number (int): 118974893359828264100897486028525538121
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 5b:a3:82:d4:45:b3:29:d7:a4:2e:7c:70:f8:0b:17:c8:84:de:94:45
Fingerprint (sha256): e0:ee:e3:ad:d1:8a:a1:bf:4f:c4:aa:ec:30:3b:ba:57:eb:8d:28:fd:ca:59:0e:3f:35:05:12:21:5a:67:25:a1

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate *.portal2.e2r.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.portal2.e2r.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.portal2.e2r.jp

Other certificates including the domain name e2r.jp

(limited to 100 certificates)
www.portal.e2r.jp
www.portal.e2r.jp
*.portal.e2r.jp
www.open.e2r.jp
*.e2r.jp
*.portal2.e2r.jp
www.e2r.jp
*.portal.e2r.jp
www.portal.e2r.jp
www.portal2.e2r.jp
www.portal.e2r.jp
www.portal.e2r.jp
www.portal.e2r.jp
www.e2r.jp
support.nttwestgp.e2r.jp
*.portal.e2r.jp
www.nttwestgp.e2r.jp
*.e2r.jp
*.portal2.e2r.jp
*.portal.e2r.jp
*.portal.e2r.jp
support.nttwestgp.e2r.jp
*.portal2.e2r.jp
*.e2r.jp
*.portal.e2r.jp
www.open.e2r.jp
www.nttwestgp.e2r.jp
www.portal.e2r.jp
*.e2r.jp
*.e2r.jp
*.portal.e2r.jp
*.e2r.jp
*.portal2.e2r.jp
support.nttwestgp.e2r.jp
www.nttwestgp.e2r.jp
*.portal.e2r.jp
*.e2r.jp
www.e2r.jp
*.portal.e2r.jp
*.portal2.e2r.jp
www.nttwestgp.e2r.jp
*.portal.e2r.jp
*.e2r.jp
*.portal.e2r.jp
www.e2r.jp
*.e2r.jp
*.portal.e2r.jp
www.e2r.jp
*.portal2.e2r.jp
www.nttwestgp.e2r.jp
*.portal.e2r.jp
www.portal.e2r.jp
www.e2r.jp
www.e2r.jp
*.e2r.jp
*.e2r.jp
www.e2r.jp
www.e2r.jp
www.e2r.jp
www.portal.e2r.jp
*.e2r.jp
*.e2r.jp
*.portal2.e2r.jp
*.portal2.e2r.jp
support.nttwestgp.e2r.jp
*.e2r.jp
www.portal.e2r.jp
www.portal2.e2r.jp
*.e2r.jp
*.portal2.e2r.jp
www.nttwestgp.e2r.jp
www.open.e2r.jp
www.nttwestgp.e2r.jp
www.e2r.jp
support.nttwestgp.e2r.jp
*.portal.e2r.jp
www.portal.e2r.jp
www.e2r.jp
support.nttwestgp.e2r.jp
*.e2r.jp
*.e2r.jp
support.nttwestgp.e2r.jp

Certificate

The complete raw certificate details for *.portal2.e2r.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdoQHO60wkmEXp3emunt
DlxMvWfZNfOPVj3rrUP3fTquEQq21zrj2FarMtPTBHubbjSvZux7c3IlON618G/u
e1PZS3z5RduG7kz0vmvNwXtNRuu4B9uROEdL0GoIjCnKTh7XaC5c7w7fHCYapCqm
yLrlg1MLgWvpuTSReFOZVemRJrZYtmeHGC7nIcSkr14qFK92z/A8+2aauaQ995fL
Nyf+1ARN649t1QPMxOZWSbWR1VFkNYp37lRZH98Jeoj0S1IOGFmRL7EHSiyTKQhT
0Oj94utvur03kuhJMSN4596s3kZYTY1pV9epqbDeAaX0GVYJH8e8G/GuT3QM0QkX
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118974893359828264100897486028525538121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.portal2.e2r.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22956664043026928555903103037600864891010801085193518210199745311738283391602924883216088688198641036656962822814043586413204776568104166142270858821501555792178182966526356491834040535879529124789420685462751200262652306441447758303783689982468970512311366628342345362442063716145322317313189523910661070808063286181671150791522072198595844765415300338132255857850616609775832981820923537938572629518553170837632612157451029044377672540380402628498169135096335285973951296553972408047235177668236306197078551900040379366948687606188722674324904276566445647027623090746030695604865484996718897248816637258156598695851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal2.e2r.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000155386e99320000040300473045022068fa170f8db809bcb62c1ad19ada53628446cd3d9bc5b76dfe6a5d65b6d8d733022100d91c4b67cfdb253b88f7b8a7e0b14e01334191da4cb44e0fab58f537f1c0a65a007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000155386e9984000004030047304502210088437c5f8c7af05f6f4ce1a42eb9475d37d99666a0dcb508d9a6bf3181b17c12022070c365809f917dc5425f3f061c6b6db2997e629aa3985640b0924f4a899fa776
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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