building.kitchen-city.co.jp

Issued by R3

About this certificate

This digital certificate with serial number 03:b5:ce:78:58:5a:42:dc:fb:8d:70:b6:79:52:65:bf:32:81 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=building.kitchen-city.co.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:ce:78:58:5a:42:dc:fb:8d:70:b6:79:52:65:bf:32:81
Serial Number (int): 323202412042728591585758521977503435666049
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:af:8c:d6:bf:f8:be:95:76:56:d0:e0:64:3d:f8:53:27:95:87:9e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 69:a8:24:6b:c9:49:13:53:d3:88:f2:84:6f:fe:69:75:06:f7:fa:98
Fingerprint (sha256): f7:82:ec:28:75:f8:eb:90:3f:95:67:22:67:a4:17:aa:f0:42:96:0a:16:d3:66:6d:33:3a:9b:bb:db:ec:80:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate building.kitchen-city.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for building.kitchen-city.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

building.kitchen-city.co.jp

Other certificates including the domain name kitchen-city.co.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for building.kitchen-city.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5P1qk+MVCaO5rUCpYn6K
RHB7iXfIYMbDiR4AyVhytEzMsgBTlUKuZL1++48dEh8KnlNxr4Mb9sX5QoHVoweL
RN/qeOooOKb5z409JeivSoHJkvkiR36EKyXdLU99mjK2UIhdvt+wlycMkTV+KoFm
2zCkyg3EYaHPOHgModSXyIGNM6BTzA3wMTDtpJj+SOxWTX0YjMdbx0+X+8Jtq++N
/Y2spFLGksdZ5t3aFwR9ttGDYvyz3maGNM+yirbfdy0m3+xo5/kZE0UGGpmWWSlb
+sVd0LcvQceFndNyZU7ouNriI/ao8tCeTiRl6OOnZFkztd0r5gKrkjkCltISkjpU
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323202412042728591585758521977503435666049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 07:13:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 07:13:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'building.kitchen-city.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28907297776679477674091885309597533184262008281233045082069342390729148262232752510743655544401300105402082253981656678352051143420033246747041348501125341966220743347524249458603528109990571109560719794270294959315102369743378799491257980255764418009054311309512134607544517129039781468222531638623837029833210344408369874932254298838090708089223521557340501180892852579277573221184494373256504888434034382151585136686614707520423784625516910165717753383312530035568546083394355186920346236493333265634563815115741959905292920987648403661403420443283920313492100619209721085193893555270472224603370488922108111508481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3af8cd6bff8be957656d0e0643df8532795879e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'building.kitchen-city.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e276cc71c00000403004830460221009f6ada9b984ae2fee3969c40ad593a1c7e362f3324aa721192d91ddf346b82d2022100cb904e99191e3bc07c391d76f717f78ce1c6c69150d70008a48d8c3a89af0122007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e276cc73b0000040300483046022100a6fff25e8bd0d4f6d72c64738336b9b7a187e40601deee9413ab290482a96827022100949d75b624e1a28034b223e59d46e212a81b1fc4713df5831808ba9e62466457
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00987c735148d18def78d5001ee84eb57d4572d183f53610aefea35e0c6634e354dee7327a820fc426c56e182eca2eed2a545aebeb5d17447bfd14836cda106313012b515a76b7daaae37a82c6f9e7cb32320cacaf2f4c9a4dfe804b90f470b6b2c5d2a3739867958d8584e6f96acc6f476928bb4ab3e045c3c590a8527e636652c23590f6746590757bfedc4acf3d82f6be635ee9b7b71b5950aeba9a8b49ea117b57348f0d1da394a982c77f7a46562525921c283bcafdbeecaf5d6228ad695cd008b0f171f62b29c8fff76aa0ea23d388fdff5417dc5e1d69ae568bfe23e479d5aa52e6ab84be300a71e6f453203f91500e8e82f7a30723273173a5d0e5caf1