myricoh.com

- Ricoh USA, Inc. -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number 27:f5:15:fc:d2:fa:12:a6:00:00:00:00:58:08:a1:c7 was issued on by AffirmTrust.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ricoh USA, Inc.

Organization: Ricoh USA, Inc.
State / Province: New Jersey
Locality: Caldwell
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 27:f5:15:fc:d2:fa:12:a6:00:00:00:00:58:08:a1:c7
Serial Number (int): 53112450527345553674072753033701794247
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 9b:1f:bb:89:95:7a:9c:38:39:71:d6:86:4e:64:ec:7a:6a:ee:01:b9
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): de:6a:b8:02:e0:66:67:53:5e:28:71:9e:6d:f2:28:0f:fb:63:f5:4f
Fingerprint (sha256): e5:08:9d:a5:68:8b:28:9f:af:46:9a:1f:e1:1d:a7:3c:b5:dd:b8:46:99:6b:36:40:3f:56:3b:4c:ba:90:e0:cc

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate myricoh.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myricoh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ebiz.ricohonline.net
myricoh.com
www.ebiz.ricohonline.net
www.myricoh.com

Other certificates including the domain name myricoh.com

(limited to 100 certificates)
*.ricoh-usa.com
*.ricoh-usa.com
itsportal.myricoh.com
*.ricoh-usa.com
*.ricoh-usa.com
*.ricoh-usa.com
*.ricoh-usa.com
myricoh.com
*.ricoh-usa.com
*.ricoh-usa.com
m.myricoh.com
myricoh.com
*.ricoh-usa.com
sni.cloudflaressl.com
itsportal.myricoh.com
m.myricoh.com
m.myricoh.com
*.ricoh-usa.com
m.myricoh.com
itsportal.myricoh.com
myricoh.com
sni.cloudflaressl.com
*.ricoh-usa.com
*.ricoh-usa.com
*.ricoh-usa.com
myricoh.com
*.ricoh-usa.com
myricoh.com
m.test.myricoh.com
myricoh.com
myricoh.com
myricoh.com
*.ricoh-usa.com
*.ricoh-usa.com
*.ricoh-usa.com
myricoh.com
sni.cloudflaressl.com
myricoh.com
m.test.myricoh.com
myricoh.com

Certificate

The complete raw certificate details for myricoh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi12Zw8Ol6fRSi5AGXWRB
LbCp7oiZuKqChSXnb3FKR3LOR1CqKMngTD778DQAIzmmhD73GweB+eGlok3aTPwh
p09TydY2CrO10mCeEUoLj1METbuZjl1qip2SU2KN5xiyO4mn+ZvrwWI+9z+De5gH
WCPJd+qm3ZIH8SuSaFMa46PkZy4omEEW7ejZTQWum32PDglR13Rekgalg8cMMmxo
ZNN4VkpmzGvE0kB9nc6AwfnlC98CgGMKdDsP5P8tzrxhiI5Sk6JLOGca3LGq2zt5
t/D4/x/QuxSJAUuvJFpYtww8Q5ori/DkA3MDNsiisdZA3cBObdtPQQBseTB0DvGB
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53112450527345553674072753033701794247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-25 17:30:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-25 18:00:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Caldwell'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ricoh USA, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myricoh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17593280587795599228564651808669243666285043455854389266726165277124845974031592224124829729018098165253047959407420200993893200231492034706243735584954781514667566034355766338719098613227130319007842699943674183219678424106361191008227664505760323986954627153669685609577918542422982369698961570186565648106217715053214633163418209060709613995498125415687172416209240338091288706352072872682939139325714749042460104380262109439292358714263685177406969323028574205916993863904732738140117958198820688052095883777698254803571177882053641767612819271604397122002099760314100915408640524327050493960223952656174494613889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz.ricohonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myricoh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebiz.ricohonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myricoh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b1fbb89957a9c383971d6864e64ec7a6aee01b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0091e5f16cd45332a539582119aad2fcf323bb28f2d92ddce17b2d8b112b0852cce90a831ffd46bdbce631ddb32950a4020252e9c18bfd13eefde6b12ba93ea00effa6576c2b964cec19c35d3521a4d2735928c1ad8395f9523c06b28bbf708d98812de7c5be8eb58eeeeadd32ce2ef7a725e5a49f3fcea0b21c378464cb48ee0601bfb1d059bf240ccb82188c7796ce590d902a221063452aa88c75d7c986ba24e4ed4f336ccc226ea2c00616ccace79c1ed9f7df22f2095d18070ff99750690d9cfdfb642b0fdf7a083d9a660359a47e441b58e6c0f5675e0d98eae7defe8ea36df1238d2e4e025ecac78b0a738f0bf7d11863f38ddeafed6f9e7b66de4f1d6e