ask.corp.klab.com

Issued by FujiSSL Public Validation Authority - G3

About this certificate

This digital certificate with serial number 57:a2:68:3f:d4:5c:55:57:93:72:bc:f1:0b:96:af:2f was issued on by SECOM Trust Systems CO.,LTD..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ask.corp.klab.com

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate will expire on

Certificate Details

Serial Number (hex): 57:a2:68:3f:d4:5c:55:57:93:72:bc:f1:0b:96:af:2f
Serial Number (int): 116486102152065787465002754557814943535
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 3b:7a:f5:a2:70:28:e1:f3:4e:e9:f4:fa:47:71:00:df:25:c2:6e:51
AuthorityKeyId: bc:eb:d9:11:e0:51:64:6f:ff:f0:74:4f:0d:5a:ab:4a:4f:2d:78:27

Fingerprint (sha1): 3c:95:ae:90:78:8b:e5:d0:a2:95:f5:e5:83:df:bf:93:03:8b:5b:17
Fingerprint (sha256): f4:43:9a:63:ff:9b:84:d3:8c:fa:21:a1:59:4b:2c:1b:cb:60:53:82:bf:bb:81:19:52:e5:83:b1:df:54:b3:3d

Issuing Certificate URL: http://repo1.secomtrust.net/sppca/nijimo3/ca-der.cer

Revocation information

OCSP Server: http://nijimo3.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nijimo3/fullCRL.crl

Check the revocation status for certificate ask.corp.klab.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ask.corp.klab.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ask.corp.klab.com

Other certificates including the domain name klab.com

(limited to 100 certificates)
*.klab.com
www.klab.com
*.github.jp.klab.com
www.klab.com
ask.corp.klab.com
www.hueimaging.com
iatl-upnvyk.org
klab.com
inquiry.corp.klab.com
next-admin.tapnotion.com
*.github.jp.klab.com
www.convo.com.ua
stg.klab.com
klab.com
*.klab.com
lp.corp.klab.com
github.jp.klab.com
github.jp.klab.com
github.jp.klab.com
www.klab.com
lp.corp.klab.com
github.jp.klab.com
lp.corp.klab.com
www.klab.com
lp.corp.klab.com
*.klab.com
github.jp.klab.com
ask.corp.klab.com
www.klab.com
github.jp.klab.com
lp.corp.klab.com
stag.patient.umasalud.com.mx
ask.corp.klab.com
*.pcms.klab.com
www.klab.com
ask.corp.klab.com
schoolchecker.co.uk
github.jp.klab.com
www.klab.com
s.klab.com
ask.corp.klab.com
klab.com
www.bittbook.com
www.decorarte2000.com
ask.corp.klab.com
stg.klab.com
*.klab.com
rentalsunited.mysmarthotel.com
ask.corp.klab.com
spanner.fyi
*.klab.com
faq.corp.klab.com
*.pcms.klab.com

Certificate

The complete raw certificate details for ask.corp.klab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/wz7iErHdJnFNHliAUw
ZWRI4NOrK8OL5yOvoWknAB1iyhw9PVuP3M7a2OMDi8ZHuK33ntFVchCgjFkQc6fe
TZG6mzY2l4cXUoRsqZq4deH+PAbiLMPIywbdIi9Lm/wcHgcFNBTa6iRsNrbzdPEn
mKnNQoehPZkVO4qshESTWRAzzUgBNacoArsX3MWp4AHPVdM3pP/ZkvH4LfQd/Amh
edssTQBOyE9JUX8bIaeygVSH3sjwS6t4SiFUDyTpsw/SZJvixGT4XyI3Zb2qdVFG
MtoDbDErqU12iV05tu88/a85Klp370ecXLRIUUdOCQyyonu0Ja0bw5aZNoSFVCk1
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116486102152065787465002754557814943535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FujiSSL Public Validation Authority - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 05:13:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-16 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ask.corp.klab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23225975670446263538665525940158207089328475256627261950650413671644410555588723544064666084073403627998708301477238872074354369498746496549083643360803359463555952569598782519990890415593594469883709398150013362781265779852911100608983200281787872541323792396283586697217555596897277606770211141143415074531841322050296281164920325209719636984165112902465601617673544489864316189802335330153406415373325486456725507666244581212976673407150859628114198289792290745446337694037057566619655511404154697201134125984152133724638093622326356708332758972644060292717580491417918413641040024451792298487696044822698801051083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bcebd911e051646ffff0744f0d5aab4a4f2d7827
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nijimo3/ca-der.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://nijimo3.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.corp.klab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.213.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nijimo3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nijimo3/fullCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b7af5a27028e1f34ee9f4fa477100df25c26e51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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