gitlab.decoo.org

Issued by FujiSSL Public Validation Authority - G3

About this certificate

This digital certificate with serial number 74:01:3b:48:7e:8a:f3:ab was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Certificate Subject

CN=gitlab.decoo.org

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 74:01:3b:48:7e:8a:f3:ab
Serial Number (int): 8359027565923070891
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 1a:b1:38:8b:1e:a7:a2:f0:e2:c8:10:b5:c1:87:82:9a:cb:c4:fe:76
AuthorityKeyId: bc:eb:d9:11:e0:51:64:6f:ff:f0:74:4f:0d:5a:ab:4a:4f:2d:78:27

Fingerprint (sha1): a0:e7:c4:31:50:2a:fa:0c:fc:8c:7b:b2:f7:27:0a:87:e9:18:4f:2e
Fingerprint (sha256): e8:12:6c:be:86:c6:e4:68:07:b7:4e:a9:89:1d:d7:c8:53:f8:e5:f1:58:46:71:08:38:81:95:df:d7:1b:c5:d5


Revocation information

OCSP Server: http://nijimo3.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nijimo3/fullCRL.crl

Check the revocation status for certificate gitlab.decoo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.decoo.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitlab.decoo.org

Other certificates including the domain name decoo.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for gitlab.decoo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEhzCCA2+gAwIBAgIIdAE7SH6K86swDQYJKoZIhvcNAQELBQAwZzELMAkGA1UE
BhMCSlAxJTAjBgNVBAoTHFNFQ09NIFRydXN0IFN5c3RlbXMgQ08uLExURC4xMTAv
BgNVBAMTKEZ1amlTU0wgUHVibGljIFZhbGlkYXRpb24gQXV0aG9yaXR5IC0gRzMw
HhcNMTgxMjE3MTQyNzQwWhcNMTkxMjE4MTQ1OTU5WjAbMRkwFwYDVQQDExBnaXRs
YWIuZGVjb28ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxf7
1SMXzyxjJLfCCFN+R6nyO2zqYL3JEvr1opa9Z74GQVY8s04E0v01IDSA6gSdDjwD
23fShzicg0Vna97Vzs7q4JKnpqlsLlIoP/GIoUOJSjFUFr00QNLDx5owYs46POMr
hlUgjBOnHw/UIV5esI7/S0ooBbKK4x5dT6J+ofJIoEdhnE0qED2MN92w1NX10JkW
M2+vK6C1gqyMrS9shTCUs/eROyAubw0aRHU4JQ+KdRh+sdhRzMnfC3no1JAqIyc+
DKoTdPuolciBiJMHm7uNf+AHxd0Lj+b/ILgI2PH612yWB0g7ULonI5y3V1HukZ+s
bUSjtmYLrstWAAGahwIDAQABo4IBgTCCAX0wHwYDVR0jBBgwFoAUvOvZEeBRZG//
8HRPDVqrSk8teCcwPgYIKwYBBQUHAQEEMjAwMC4GCCsGAQUFBzABhiJodHRwOi8v
bmlqaW1vMy5vY3NwLnNlY29tdHJ1c3QubmV0MBsGA1UdEQQUMBKCEGdpdGxhYi5k
ZWNvby5vcmcwXAYDVR0gBFUwUzBHBgoqgwiMmxtugVUBMDkwNwYIKwYBBQUHAgEW
K2h0dHBzOi8vcmVwbzEuc2Vjb210cnVzdC5uZXQvc3BwY2EvbmlqaW1vMy8wCAYG
Z4EMAQIBMBMGA1UdJQQMMAoGCCsGAQUFBwMBMEYGA1UdHwQ/MD0wO6A5oDeGNWh0
dHA6Ly9yZXBvMS5zZWNvbXRydXN0Lm5ldC9zcHBjYS9uaWppbW8zL2Z1bGxDUkwu
Y3JsMB0GA1UdDgQWBBQasTiLHqei8OLIELXBh4Kay8T+djAOBgNVHQ8BAf8EBAMC
BaAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBABLTqv4Z
Vws4Bb80/O4fKalsdGuspV5TiZb1dZuaRyp9uzzFBeNKfzSUsw60f+kZkZiCPz53
lw4xExXYO6JysZyAGQ6GpK6bNrVnGcITVRvlSjrK9H98LHD9QHZKibm7r2zpinus
UR6bC2SwxzYEFWRrVonLHe2QXCKvepNDcG0Tt/dD/tXwvS2dbUCDK1o9CHeshiYF
TZ6MmmBsVXsKSHmmwomO8SgKtutGzCJITyMMsZEo6F4KkB2fMTcJ0b9hfv1ZvDjr
apXii4+23kPuROLSnGL/+h9kaHJqvPiTI/2XvUedKq7XUsnl6+VvmpGcKVKSXrv4
UIU0GBDYb/EwqAc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxf71SMXzyxjJLfCCFN+
R6nyO2zqYL3JEvr1opa9Z74GQVY8s04E0v01IDSA6gSdDjwD23fShzicg0Vna97V
zs7q4JKnpqlsLlIoP/GIoUOJSjFUFr00QNLDx5owYs46POMrhlUgjBOnHw/UIV5e
sI7/S0ooBbKK4x5dT6J+ofJIoEdhnE0qED2MN92w1NX10JkWM2+vK6C1gqyMrS9s
hTCUs/eROyAubw0aRHU4JQ+KdRh+sdhRzMnfC3no1JAqIyc+DKoTdPuolciBiJMH
m7uNf+AHxd0Lj+b/ILgI2PH612yWB0g7ULonI5y3V1HukZ+sbUSjtmYLrstWAAGa
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8359027565923070891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FujiSSL Public Validation Authority - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-17 14:27:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.decoo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25638202721708517740622964271569708331075922175812723757351409333121980205198550169599610619231630458457934066142830372386282402571118956323516563452247198561984835021016600160177754268443410565674241820255623630521444360130094262613299079623928189651464361165493532672901786965256446668710755007091127932987278006564195126076139774912309967863057201364404572111971773631529274480783491364665576312311768529124943948186455715342320779909667133244152961995661681925135010050641103056045049137174970964387545885094951357998567199289424124878653310610764069975781120998237073817489065832723159481979306322990281783351943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bcebd911e051646ffff0744f0d5aab4a4f2d7827
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://nijimo3.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.decoo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.213.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nijimo3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nijimo3/fullCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ab1388b1ea7a2f0e2c810b5c187829acbc4fe76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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