www.kyoto-mensclinic.jp

Issued by FujiSSL Public Certification Authority - G1

About this certificate

This digital certificate with serial number 49:f7:3f:b1:7e:f5:4d:0a was issued on by Nijimo, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Certificate Subject

CN=www.kyoto-mensclinic.jp,C=JP

Nijimo, Inc.

Organization: Nijimo, Inc.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 49:f7:3f:b1:7e:f5:4d:0a
Serial Number (int): 5329798715588037898
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 1f:cb:8b:7b:d7:bc:57:53:13:fd:0f:7d:6b:21:d4:5e:5f:3e:d9:a4
AuthorityKeyId: 82:2e:30:32:24:87:93:5f:02:21:56:07:d7:47:40:9b:06:9f:fb:5a

Fingerprint (sha1): 5f:dc:aa:5c:52:51:be:5d:dc:57:cf:fc:bc:72:5b:4f:86:6b:2a:f2
Fingerprint (sha256): f1:28:48:ae:23:75:fa:7d:3b:be:d5:ef:96:6b:b7:60:cd:fe:8a:d8:5a:b3:ee:65:6b:87:ce:02:b0:a4:78:1e


Revocation information

OCSP Server: http://nijimo.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nijimo/fullcrl.crl

Check the revocation status for certificate www.kyoto-mensclinic.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kyoto-mensclinic.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kyoto-mensclinic.jp
kyoto-mensclinic.jp

Other certificates including the domain name kyoto-mensclinic.jp

(limited to 100 certificates)
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp
www.kyoto-mensclinic.jp

Certificate

The complete raw certificate details for www.kyoto-mensclinic.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEiDCCA3CgAwIBAgIISfc/sX71TQowDQYJKoZIhvcNAQELBQAwWjELMAkGA1UE
BhMCSlAxFTATBgNVBAoTDE5pamltbywgSW5jLjE0MDIGA1UEAxMrRnVqaVNTTCBQ
dWJsaWMgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMTAeFw0xNjExMDYwODU4
MzRaFw0xNzExMDYyMzU5MDBaMC8xCzAJBgNVBAYTAkpQMSAwHgYDVQQDExd3d3cu
a3lvdG8tbWVuc2NsaW5pYy5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALzfEGaOeEdeki3V6db2eBiO7vppEeL/smOm113Y/3UKsMYt/xs6GE2bKsj+
DySMSIr9Etdglpd+HBdxLHtPeEsHy27A+OtVAWEzh/Dw5kWRyLxrq0PYQ64TUBiz
MNEXb6zO5H/8HTs6B/vKriJVmtwhWcGN09WU4gcUYI3eW1osb1/KvmOvvPTlr8Yh
Wsq/veDAqGMDtSxlcoJAVkqRtIiWzRNZWHKXjZHyDc1aY8OLNEyaz77MxBLNYg2o
6IwxCokAGBi1IqF1+MVuAxoA3NaCqbRtAcv2rmWykqr4KP/zLX9KEi1PCC6qYcoD
mwyby2sl8gF4PcK5iM4RKbU5IH0CAwEAAaOCAXswggF3MA4GA1UdDwEB/wQEAwIF
oDATBgNVHSUEDDAKBggrBgEFBQcDATAdBgNVHQ4EFgQUH8uLe9e8V1MT/Q99ayHU
Xl8+2aQwHwYDVR0jBBgwFoAUgi4wMiSHk18CIVYH10dAmwaf+1owNwYDVR0RBDAw
LoIXd3d3Lmt5b3RvLW1lbnNjbGluaWMuanCCE2t5b3RvLW1lbnNjbGluaWMuanAw
UQYDVR0gBEowSDBGBgoqgwiMmxtugVEBMDgwNgYIKwYBBQUHAgEWKmh0dHBzOi8v
cmVwbzEuc2Vjb210cnVzdC5uZXQvc3BwY2EvbmlqaW1vLzBFBgNVHR8EPjA8MDqg
OKA2hjRodHRwOi8vcmVwbzEuc2Vjb210cnVzdC5uZXQvc3BwY2EvbmlqaW1vL2Z1
bGxjcmwuY3JsMD0GCCsGAQUFBwEBBDEwLzAtBggrBgEFBQcwAYYhaHR0cDovL25p
amltby5vY3NwLnNlY29tdHJ1c3QubmV0MA0GCSqGSIb3DQEBCwUAA4IBAQAhzhv4
0629ulE+85kua9ag4OHHnRuiitsPJMyUfnRRO1TgR/0v9VL7bYYPhEh5BmDQmNiR
74cJJn+fJi7n3bHn9k3e60J6XcvKDMAgQoZv0+M/FneyNqRUu8YZ305qlwzwTQja
QwMrr12mvNtmCqODyUYAGMCC7yUYukIHWRxJzHHGGK++caJNnnb8z20B8wPk0tyA
Ijo99MPD9Yc/OyR8Gi1Fx1WkzTCTpF/r/mz/yZf+/HbnvD6ohLV0QmDfWm0bwc+d
rpIeOrArs32l4+vJig1gU2I/BFma32DUqrGE5pzs2SBcnL2LSrCiAH18yhVDhmjw
APPWBMcl9x8496qN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN8QZo54R16SLdXp1vZ4
GI7u+mkR4v+yY6bXXdj/dQqwxi3/GzoYTZsqyP4PJIxIiv0S12CWl34cF3Ese094
SwfLbsD461UBYTOH8PDmRZHIvGurQ9hDrhNQGLMw0RdvrM7kf/wdOzoH+8quIlWa
3CFZwY3T1ZTiBxRgjd5bWixvX8q+Y6+89OWvxiFayr+94MCoYwO1LGVygkBWSpG0
iJbNE1lYcpeNkfINzVpjw4s0TJrPvszEEs1iDajojDEKiQAYGLUioXX4xW4DGgDc
1oKptG0By/auZbKSqvgo//Mtf0oSLU8ILqphygObDJvLayXyAXg9wrmIzhEptTkg
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5329798715588037898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nijimo, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FujiSSL Public Certification Authority - G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-06 08:58:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-06 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kyoto-mensclinic.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23842798323659427352815361901504005513396102031793007016809134230529422132351273791661904566954487631262591690495078428780987646865607977661866086490608261118721391033764426815317554473447737909825780999755681686531891996694325347932711167859271077356437825086646020154673884800194229897814961202224694511852656959008900048715018416773640407333654521174765603817793787031432182051204898028808359290089733363135223573773289722222359362606084340571529062686499518693750523636017244339570879631323931712427910621535971916179299202684835642799331894979644854937817883034589828530847004500270662327861205618679176261869693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fcb8b7bd7bc575313fd0f7d6b21d45e5f3ed9a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 822e30322487935f02215607d747409b069ffb5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kyoto-mensclinic.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyoto-mensclinic.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.209.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nijimo/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nijimo/fullcrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://nijimo.ocsp.secomtrust.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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