*.geniee.co.jp

Issued by JPRS Domain Validation Authority - G4

About this certificate

This digital certificate with serial number 13:e4:50:92:44:f8:ff:37:e3:ac:2e:ad:ee:cc:bf:f8 was issued on by Japan Registry Services Co., Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.geniee.co.jp

Japan Registry Services Co., Ltd.

Organization: Japan Registry Services Co., Ltd.
Country: JP

This certificate will expire on

Certificate Details

Serial Number (hex): 13:e4:50:92:44:f8:ff:37:e3:ac:2e:ad:ee:cc:bf:f8
Serial Number (int): 26440809785085361006249979135249924088
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 46:e8:d4:9c:1a:a7:4a:37:b6:82:23:5c:e4:38:ad:34:82:00:9b:ee
AuthorityKeyId: 7c:24:ce:0d:a4:38:2d:c7:b3:63:5e:a7:78:7a:8d:1d:4c:2e:c7:15

Fingerprint (sha1): f1:04:cb:bb:58:af:33:b7:21:f7:13:9a:84:99:8f:5e:61:d1:1c:6b
Fingerprint (sha256): f7:a8:94:b9:f6:7d:01:a5:ba:4f:90:6f:b1:8e:e6:dc:4d:e3:1f:d0:ea:b0:64:0f:d5:bd:c3:de:ef:bb:91:fb

Issuing Certificate URL: http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g4/JPRS_DVCA_G4_DER.cer

Revocation information

OCSP Server: http://dv.g4.ocsp.pubcert.jprs.jp
CRL Distribution Point: http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g4/fullcrl.crl

Check the revocation status for certificate *.geniee.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.geniee.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.geniee.co.jp
geniee.co.jp

Other certificates including the domain name geniee.co.jp

(limited to 100 certificates)
stg-gl.geniee.co.jp
en.geniee.co.jp
geniee.co.jp
stg-top.geniee.co.jp
margarita.palmero.xyz
dev-top.geniee.co.jp
stg-gr.geniee.co.jp
mktcreativo.mx
beta.memesfr.com
www.djeliba.com
opusmobilus.fr
tech.geniee.co.jp
go.blocky.host
sdklog.geniee.co.jp
www.srngroup.be
tech.geniee.co.jp
www.levieikodesigns.com
goga.co.jp
dictionary.fm.grzeg.pl
holioffersale.com
en.geniee.co.jp
embed.dev.evertransit.com
tech.geniee.co.jp
tech.geniee.co.jp
admin.canb.eu
stage-admin.alfred.is
cpn-uml.com
tech.geniee.co.jp
goldenhillpainting.com
tech.geniee.co.jp
tech.geniee.co.jp
go.blocky.host
app.kiwi-go.jp
tech.geniee.co.jp
settlements.bcb.network
dashboard.foodly.ca
santa.tryq.ai
geniee.co.jp
geniee.co.jp
geniee.co.jp
en.geniee.co.jp
motherskycoffeetraders.com.au
hd.xoi-lacz.tv
storybook.eleanorhealth.com
suziephan.com
tech.geniee.co.jp
sdklog-test.geniee.co.jp
tech.geniee.co.jp
tech.geniee.co.jp
tech.geniee.co.jp
tech.geniee.co.jp
cutis.ai
tech.geniee.co.jp
admin-test.mytwido.com
en.geniee.co.jp
www.weddingmusic.app
unescosmesp.ge.orchestra4edu.com
embed.dev.evertransit.com
aima.info
geniee.co.jp
business.bog.ge
eland.dev
stg-gl.geniee.co.jp
tech.geniee.co.jp
opusmobilus.fr
xmarksthespotsoftware.com
eland.dev
www.burburata.com
queme.smartcitysolutions.biz
developers.geniee.co.jp
mylocalshop.sunseasolutions.com
sdklog.geniee.co.jp
tech.geniee.co.jp
geniee.co.jp
geniee.co.jp
ntmdev.com
movementtracker.app
www.qipo.com.br
app.kinectem.com
brimsecurity.com
tech.geniee.co.jp
www.geniee.co.jp
tech.geniee.co.jp
dev-top.geniee.co.jp
tech.geniee.co.jp
tocoankhanh.com
stg-gr.geniee.co.jp
okeyauth.com
geniee.co.jp
tech.geniee.co.jp
app.kiwi-go.jp
holioffersale.com
tech.geniee.co.jp
ganbei.lader.tw
geniee.co.jp
*.geniee.co.jp
stg-gb.geniee.co.jp
www.clearplan.io
motherskycoffeetraders.com.au

Certificate

The complete raw certificate details for *.geniee.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1iUOsDcmAaf9iVZaiJ4
5ruio5Z9AVzuR0mzHjBmqlXs/4W7KDbdbeBgbN6cD/4R6m45h0xt2E3Z2bcMs/fq
eVprY+jOqzppE+7uuQasKK/vzss84JQybaQdrlIcqsP7RcsWxfgVCq+NLy52HAKR
Fepuzr78zOdBRRJ2VwFWswMs8ahjejoH8qhqMVPAqYlQrf4Ybknfir/g1zb8aRCU
ATPMo6L+DrHhZl36WXzdeAjShY0NaiL06JdyfXIG9dbJTteBMcOSSvhHCx42sx6F
lHNw/5bKh1I+FgdgMcptgPXBJGh6sAzQx4OjyY0bbQtHC+CDnGM5mEOpmFNkL8vF
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26440809785085361006249979135249924088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Japan Registry Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JPRS Domain Validation Authority - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 06:11:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-30 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.geniee.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26175009071452145861345359639390209691964166795160103618993239621738466741482542120147030027574805174130919095727168097898210189533773560422129745132811786802522647357866798121317119468591390860058883137119027173226661060746187130579906328792938875448811937596368987211388486495662347311259811584109692217424559408413704397546967464104409354282312855431057501276128457122289005809340441172912349748875188080424540953358206783946786449427387746751931363601246230252440528716847839566291148250937504549594657668392240125251292937394454645462839005313803817775428732159439815815627806532037897402129994120122796736234823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c24ce0da4382dc7b3635ea7787a8d1d4c2ec715
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g4/JPRS_DVCA_G4_DER.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dv.g4.ocsp.pubcert.jprs.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geniee.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniee.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53827.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://jprs.jp/pubcert/info/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g4/fullcrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46e8d49c1aa74a37b682235ce438ad3482009bee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00680ef2df7fa45b174bd0f6961c58dcbd663d0572dd5e68232a1bc9ee8f22e2ef5efa880a538f2bb59f764e01d1f1765276be019b70f1722d1611716249d18b3872a82864b60e79d595d7ceb5594bfa5c57575a79be90c77cc52af4168efa94eaf4b15a78967cac5f6c8b0c7c406d268166be6edcbbff44ad8a40f5bf502cf9f313252b6f647fd22b51b904dbd2db85878b9bb452ef03b59c9e9f23c9ca8e965a615c2a23d92d4be8b4a50b1a4bbcb6bb0cdeb83890187b3e325f864406f7b50f371aae58de55934ae3c071376364460a465b6d037efd5c1b61830b192d63df22eff6192e49b6ad35746096c8437ef7fa447956ee9856dc875c132b8f9a5ee25e