www.kiwi-go.jp

Issued by R3

About this certificate

This digital certificate with serial number 04:a8:25:90:8f:4a:69:5e:8e:32:a1:a2:ff:18:4e:2c:58:0c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.kiwi-go.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:a8:25:90:8f:4a:69:5e:8e:32:a1:a2:ff:18:4e:2c:58:0c
Serial Number (int): 405666513402630386935631222848348486391820
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:28:35:8c:cd:42:3a:69:da:0d:bc:e8:6e:5c:c8:46:8c:33:21:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 55:85:c3:86:5e:c9:63:a9:b1:c5:0b:13:bd:94:d0:cc:b9:ef:ca:00
Fingerprint (sha256): fe:7b:78:1c:51:6d:d1:d6:1b:b0:b7:ce:c9:98:15:90:b7:ba:6a:41:03:e0:bd:ab:8c:6d:1d:21:c6:4c:97:7e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.kiwi-go.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kiwi-go.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kiwi-go.jp
www.kiwi-go.jp

Other certificates including the domain name kiwi-go.jp

(limited to 100 certificates)
www.mrandmrsnuzzo.com
iecaminosluz.mybookplus.net
coachap.us
beta.memesfr.com
iecaminosluz.mybookplus.net
dev-backoffice.towa.network
astaria.io
www.errakis.com
www.danthedevman.com
admin.giothanhle.org
www.expi.ai
admin.canb.eu
memorypie.app
desarrollalab.com
myriadwireless.com
www.mathuraprasadintercollege.com
zoom.revnt.io
app.speisewerkstatt-uebigau.de
guessmine.com
app.kiwi-go.jp
app.manee.net
imagine.malinowy.me
commissions.suntria.com
isv.aliaddo.com
www.ezhava-matrimony.com
firebase.flosette.com
cdrvalkyrie.com
www.hansgurbig.de
dev-backoffice.towa.network
memo-de-vie.info
www.poshspace.jp
wolfroels.be
app.speisewerkstatt-uebigau.de
www.appexpedition.com
www.expi.ai
stars.edmond.ai
www.kiwi-go.jp
frolikov.net
gloria-admin-demo.arielretamar.com
www.kiwi-go.jp
zoom.revnt.io
web-revise.irous.net
www.schwarzgames.com
www.davidxiao.me
stars.edmond.ai
app.kiwi-go.jp
isv.aliaddo.com
www.mathew-mullen.com
app.getearl.com
www.artech.gallery
*.kiwi-go.jp
www.kiwi-go.jp

Certificate

The complete raw certificate details for www.kiwi-go.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgISBKglkI9KaV6OMqGi/xhOLFgMMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MTUwODEyMjhaFw0yNDA4MTMwODEyMjdaMBkxFzAVBgNVBAMT
Dnd3dy5raXdpLWdvLmpwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
xy0L3qHNcgdezlTnF72Tl1HYsvahP6AHGNMNJexedy8tuhI8UsUk1JNb5Le4gHaF
3hUcpekZQ1EWFgL5qlN63q9L1CLV8DI6qiR3vpRulnEb28uEidasPYzoPGqTHqLN
Yt53DzIKYV6fMx1VhY7jpmJ2zE7FWnAjiy443s7i6itCy8LP+zQme1b1AhC7l+EF
BLUAWa8EuOdGOvKjO2JtaMjADFU2BZasIKC7UIqiM2pMuHmUIYQRl3SDvxa2s9yn
TqFBJkR+veKFo6b/9rgDcuHlTODycNEUnHOTLI28qDWqSnSq/6pOqI47hwjtKmt8
VwNiXk02xMOM3dhhvaobxQIDAQABo4ICGzCCAhcwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBRsKDWMzUI6adoNvOhuXMhGjDMhTTAfBgNVHSMEGDAWgBQULrMXt1hWy65Q
CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y
My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn
LzAlBgNVHREEHjAcggpraXdpLWdvLmpwgg53d3cua2l3aS1nby5qcDATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw42vapkc0
D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABj3uGRlQAAAQDAEcwRQIhAKI2YH2X
6c3kTdHIn62NBSrFmbV6YuQgI811JwM2ZdeAAiADs7yHmIF2Q415F62xurSajpjN
3jUK+4L6XNWJ2vIs5QB1ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTK
AAABj3uGRloAAAQDAEYwRAIgTMU/dhhDGpJT/IE7LUKUcKru+QuPan8G/VHRC6X1
p0UCIAfagGbDT6j9x2cNoyPTxgKHHoTafJ1j/xbJblSZ/dEtMA0GCSqGSIb3DQEB
CwUAA4IBAQAV7U5yilmEgLMjyufHo0CT6cOZ+G/q/SI+UWwWf/7fLRri46rMPsHB
52VkUU1SPwYYtNQmLnQlKf1/XractcXY0umFLgK5zpD7Bv1lexvrD03bFfyMAEY5
Mp2VAB8rMup/o4RHyLE0KBAuDmP9S3JUFx0/SG7JMfOFUvEP92RQ2b56f6KvqEAl
tcDk52S0CimTrDn6OIp9jAChmaxyn0l+JdUya2hfOwU/ARZYEnGKblXFv58tSNov
EI842gTvhO1s7zR4gpGkEJBD0FyPumbr+Bi9jdMOqhdK5P+RsHkR552Kc9ZwUBqS
o8Xpa5e5yCIxa1LBc6o+LT1voMU2ld9n
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy0L3qHNcgdezlTnF72T
l1HYsvahP6AHGNMNJexedy8tuhI8UsUk1JNb5Le4gHaF3hUcpekZQ1EWFgL5qlN6
3q9L1CLV8DI6qiR3vpRulnEb28uEidasPYzoPGqTHqLNYt53DzIKYV6fMx1VhY7j
pmJ2zE7FWnAjiy443s7i6itCy8LP+zQme1b1AhC7l+EFBLUAWa8EuOdGOvKjO2Jt
aMjADFU2BZasIKC7UIqiM2pMuHmUIYQRl3SDvxa2s9ynTqFBJkR+veKFo6b/9rgD
cuHlTODycNEUnHOTLI28qDWqSnSq/6pOqI47hwjtKmt8VwNiXk02xMOM3dhhvaob
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405666513402630386935631222848348486391820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 08:12:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-13 08:12:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kiwi-go.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25143635879140972098052186314950023554137550620157755483392510642760868727704928107510807415537010175589286863429177135856893257964960440370254357307117185479967859212117067622926777430292148954236616308121625712792865248569762732909049822250299074293435962560155629834222896981320677702434845425090433902182101565085141140994383540498480009249907022556803523413317890329041944926803948040447017318340705948362810455503881985197784247860466320052512232113781734860641570629609853514688816646436283485513245725723674577225829518411403662763886343510657575483811708186755380343757673762009097317280793389901736223316933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c28358ccd423a69da0dbce86e5cc8468c33214d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwi-go.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwi-go.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f7b8646540000040300473045022100a236607d97e9cde44dd1c89fad8d052ac599b57a62e42023cd7527033665d780022003b3bc87988176438d7917adb1bab49a8e98cdde350afb82fa5cd589daf22ce50075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f7b86465a000004030046304402204cc53f7618431a9253fc813b2d429470aaeef90b8f6a7f06fd51d10ba5f5a745022007da8066c34fa8fdc7670da323d3c602871e84da7c9d63ff16c96e5499fdd12d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0015ed4e728a598480b323cae7c7a34093e9c399f86feafd223e516c167ffedf2d1ae2e3aacc3ec1c1e76564514d523f0618b4d4262e742529fd7f5eb69cb5c5d8d2e9852e02b9ce90fb06fd657b1beb0f4ddb15fc8c004639329d95001f2b32ea7fa38447c8b13428102e0e63fd4b7254171d3f486ec931f38552f10ff76450d9be7a7fa2afa84025b5c0e4e764b40a2993ac39fa388a7d8c00a199ac729f497e25d5326b685f3b053f01165812718a6e55c5bf9f2d48da2f108f38da04ef84ed6cef34788291a4109043d05c8fba66ebf818bd8dd30eaa174ae4ff91b07911e79d8a73d670501a92a3c5e96b97b9c822316b52c173aa3e2d3d6fa0c53695df67