JPRS_OVCA_G4_DER.cer: CN=JPRS Organization Validation Authority - G4,O=Japan Registry Services Co., Ltd.,C=JP (Intermediate Certificate, Expiring 2029-05-29) detail info and audit record
Page content
CA Certificate Information and Audit Record
This certificate is intermediate certificate used for the issuance of other certificates.
- Certificate Download URL: http://repo.pubcert.jprs.jp/sppca/jprs/ovca_g4/JPRS_OVCA_G4_DER.cer (in DER format )
- Serial Number : 46157926782902501695249197199958749017
- SHA-1 Fingerprint : 55c418560fd762e1b4ce87c92f0406ac5ced34b2
- SHA-1 Fingerprint : 55:c4:18:56:0f:d7:62:e1:b4:ce:87:c9:2f:04:06:ac:5c:ed:34:b2
- SHA-256 Fingerprint : 801c522d3ad138e4f05d467ea369c1cc276078bf284018d0525ebbbc5342c836
- SHA-256 Fingerprint : 80:1c:52:2d:3a:d1:38:e4:f0:5d:46:7e:a3:69:c1:cc:27:60:78:bf:28:40:18:d0:52:5e:bb:bc:53:42:c8:36
- Signature Hash Algorithm : sha256
- Subject
: CN=JPRS Organization Validation Authority - G4,O=Japan Registry Services Co., Ltd.,C=JP
- Country Name: JP (Japan)
- Organization: Japan Registry Services Co., Ltd.
- Common Name: JPRS Organization Validation Authority - G4
- Not Valid Before: 2020-07-22 10:23:28
- Not Valid After: 2029-05-29 05:00:39
- Issuer (Parent Certificate):
- Issuer Name: OU=Security Communication RootCA2,O=SECOM Trust Systems CO.,LTD.,C=JP
- Issuer Certificate URL: NA
- Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: https://jprs.jp/pubcert/info/repository/JPRS-CP-en.pdf
- Certificate Practice Statement (CPS) URL: https://jprs.jp/pubcert/info/repository/JPRS-CPS-en.pdf
- Auditor: KPMG
- Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=cac09395-cceb-4f43-9d48-acc88385776b
- Standard Audit Period Start Date: 2022.01.28
- Standard Audit Period End Date: 2022.06.06
- Standard Audit Statement Date: 2022.09.02
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://repo.pubcert.jprs.jp/sppca/jprs/ovca_g4/fullcrl.crl
- Check its issuer’s audit information: OU=Security Communication RootCA2,O=SECOM Trust Systems CO.,LTD.,C=JP .
Download certificate through curl
:
curl -sSL "http://repo.pubcert.jprs.jp/sppca/jprs/ovca_g4/JPRS_OVCA_G4_DER.cer" --output cert.crt
Download certificate through wget
:
wget -q "http://repo.pubcert.jprs.jp/sppca/jprs/ovca_g4/JPRS_OVCA_G4_DER.cer" --output-document=cert.crt
CA Certificate Detail Information
Use openssl x509
to decode DER certificate to get detail information:
openssl x509 -in cert.crt -inform der -text -noout
Use openssl x509
to decode PEM certificate to get detail information:
openssl x509 -in cert.crt -inform pem -text -noout
Decoded detail certificate information:
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b9:b1:7e:7b:3b:17:e9:fe:e4:30:28:0c:2c:2f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2
Validity
Not Before: Jul 22 10:23:28 2020 GMT
Not After : May 29 05:00:39 2029 GMT
Subject: C=JP, O=Japan Registry Services Co., Ltd., CN=JPRS Organization Validation Authority - G4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:b9:8a:79:a5:d5:0d:04:f3:92:7a:1c:45:
94:09:2c:51:ca:f9:7e:60:f9:a8:67:3f:c8:ac:4d:
74:88:93:1c:78:72:59:7e:f5:48:62:27:cb:81:28:
34:6c:be:0e:6b:50:5c:44:8a:fa:ad:d6:8b:15:3e:
b1:a3:5e:22:4b:91:56:33:e3:da:65:64:63:20:ed:
6a:a3:37:3a:c9:a9:60:cf:36:2b:79:ff:11:ba:6b:
ce:f5:d0:b5:80:ce:3d:4c:27:b8:2b:cb:ab:7c:f7:
92:65:6c:71:cf:9b:3a:46:b1:27:5f:6a:48:87:83:
66:5e:4e:a2:af:42:6f:92:d6:34:0a:e1:77:ec:d5:
01:aa:9e:c7:10:2d:fd:b3:2a:92:59:c0:da:b3:cb:
fb:34:95:e6:2f:cb:7d:30:84:78:8c:9e:78:75:f6:
d2:c7:81:01:64:8b:2d:61:2d:fb:02:a8:9d:ed:c6:
d4:6b:ce:d6:1a:99:e2:21:23:8a:89:4d:b8:bd:f1:
94:b8:f0:fd:8a:d0:4e:3e:7c:04:85:aa:81:6a:8f:
3d:ee:9a:6a:d5:79:dd:20:49:38:cb:44:87:37:bf:
7d:2f:16:21:69:31:99:81:0c:23:71:b8:b7:f3:38:
17:03:c8:0f:a6:62:88:3c:8a:d7:17:63:0c:3e:dd:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:AE:C4:D4:32:6E:80:29:15:2A:D4:00:1C:B4:ED:23:B9:2B:38
X509v3 Authority Key Identifier:
keyid:0A:85:A9:77:65:05:98:7C:40:81:F8:0F:97:2C:38:F1:0A:EC:3C:CF
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:http://repository.secomtrust.net/SC-Root2/SCRoot2CRL.crl
X509v3 Certificate Policies:
Policy: 1.2.392.200091.100.901.4
CPS: http://repository.secomtrust.net/SC-Root2/
Authority Information Access:
OCSP - URI:http://scrootca2.ocsp.secomtrust.net
CA Issuers - URI:http://repository.secomtrust.net/SC-Root2/SCRoot2ca.cer
X509v3 Extended Key Usage:
TLS Web Server Authentication
Signature Algorithm: sha256WithRSAEncryption
8d:7d:f5:d4:6e:f3:f2:8d:06:32:59:29:04:48:7e:f2:ea:4b:
ff:3e:f4:07:5a:fd:e9:4f:5d:7d:a3:9b:14:c3:b2:a6:fd:37:
5a:9f:f0:43:90:df:ab:0d:57:c8:9e:7d:14:31:5b:1a:90:ff:
d6:80:21:cc:85:b0:14:5e:9a:62:04:8a:93:7e:de:25:d4:49:
c7:69:8a:0c:ce:0d:54:d3:e0:86:8b:81:34:d6:5f:99:d3:08:
02:37:7c:53:ab:d7:1f:1a:f1:11:93:ea:49:7e:67:db:0f:96:
25:42:14:9d:d4:f8:c3:50:c1:46:c7:54:54:02:bd:9e:90:e5:
56:c3:3f:f3:ac:db:ea:66:a4:3c:b8:f9:53:97:87:a0:a8:eb:
b5:94:ec:2c:6b:89:2c:88:d8:14:59:a3:91:ed:f3:aa:f9:1c:
fb:f4:98:b5:c6:de:cb:66:29:51:58:a3:0c:e8:7b:8b:47:e9:
26:50:39:27:2b:74:46:9c:60:e6:e0:7f:67:77:66:5b:95:ea:
4b:2f:2c:18:4f:f4:dd:53:81:f6:eb:8b:4e:aa:46:13:39:15:
b0:08:9e:1a:9d:a2:c6:4b:67:28:96:ac:f3:7b:85:a3:b9:53:
d0:bc:91:2b:22:da:7a:ca:0a:a9:6d:8a:61:01:ff:f4:34:26:
e5:63:98:50
CA Certificate in PEM Format
Use openssl x509
to convert certificate from DER
format to PEM
format:
openssl x509 -in cert.crt -inform der
Converted PEM
format certificate:
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIQIrmxfns7F+n+5DAoDCwvWTANBgkqhkiG9w0BAQsFADBd
MQswCQYDVQQGEwJKUDElMCMGA1UEChMcU0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4s
TFRELjEnMCUGA1UECxMeU2VjdXJpdHkgQ29tbXVuaWNhdGlvbiBSb290Q0EyMB4X
DTIwMDcyMjEwMjMyOFoXDTI5MDUyOTA1MDAzOVowbzELMAkGA1UEBhMCSlAxKjAo
BgNVBAoTIUphcGFuIFJlZ2lzdHJ5IFNlcnZpY2VzIENvLiwgTHRkLjE0MDIGA1UE
AxMrSlBSUyBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBBdXRob3JpdHkgLSBHNDCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN5quYp5pdUNBPOSehxFlAks
Ucr5fmD5qGc/yKxNdIiTHHhyWX71SGIny4EoNGy+DmtQXESK+q3WixU+saNeIkuR
VjPj2mVkYyDtaqM3OsmpYM82K3n/EbprzvXQtYDOPUwnuCvLq3z3kmVscc+bOkax
J19qSIeDZl5Ooq9Cb5LWNArhd+zVAaqexxAt/bMqklnA2rPL+zSV5i/LfTCEeIye
eHX20seBAWSLLWEt+wKone3G1GvO1hqZ4iEjiolNuL3xlLjw/YrQTj58BIWqgWqP
Pe6aatV53SBJOMtEhze/fS8WIWkxmYEMI3G4t/M4FwPID6ZiiDyK1xdjDD7dwH8C
AwEAAaOCAaMwggGfMB0GA1UdDgQWBBTVNa7E1DJugCkVKtQAHLTtI7krODAfBgNV
HSMEGDAWgBQKhal3ZQWYfECB+A+XLDjxCuw8zzASBgNVHRMBAf8ECDAGAQH/AgEA
MA4GA1UdDwEB/wQEAwIBBjBJBgNVHR8EQjBAMD6gPKA6hjhodHRwOi8vcmVwb3Np
dG9yeS5zZWNvbXRydXN0Lm5ldC9TQy1Sb290Mi9TQ1Jvb3QyQ1JMLmNybDBRBgNV
HSAESjBIMEYGCiqDCIybG2SHBQQwODA2BggrBgEFBQcCARYqaHR0cDovL3JlcG9z
aXRvcnkuc2Vjb210cnVzdC5uZXQvU0MtUm9vdDIvMIGFBggrBgEFBQcBAQR5MHcw
MAYIKwYBBQUHMAGGJGh0dHA6Ly9zY3Jvb3RjYTIub2NzcC5zZWNvbXRydXN0Lm5l
dDBDBggrBgEFBQcwAoY3aHR0cDovL3JlcG9zaXRvcnkuc2Vjb210cnVzdC5uZXQv
U0MtUm9vdDIvU0NSb290MmNhLmNlcjATBgNVHSUEDDAKBggrBgEFBQcDATANBgkq
hkiG9w0BAQsFAAOCAQEAjX311G7z8o0GMlkpBEh+8upL/z70B1r96U9dfaObFMOy
pv03Wp/wQ5Dfqw1XyJ59FDFbGpD/1oAhzIWwFF6aYgSKk37eJdRJx2mKDM4NVNPg
houBNNZfmdMIAjd8U6vXHxrxEZPqSX5n2w+WJUIUndT4w1DBRsdUVAK9npDlVsM/
86zb6makPLj5U5eHoKjrtZTsLGuJLIjYFFmjke3zqvkc+/SYtcbey2YpUVijDOh7
i0fpJlA5Jyt0Rpxg5uB/Z3dmW5XqSy8sGE/03VOB9uuLTqpGEzkVsAieGp2ixktn
KJas83uFo7lT0LyRKyLaesoKqW2KYQH/9DQm5WOYUA==
-----END CERTIFICATE-----
Also see Top 1 Millions Domains CA Certificate List