shibboleth.cc.uec.ac.jp

- The University of Electro-Communications -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 3f:31:e1:a7:f3:c4:d4:d7:eb:93:eb:83:fc:42:2e:fa was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

The University of Electro-Communications

Organization: The University of Electro-Communications
Organization unit: Information Technology Center
State / Province: Tokyo
Locality: Chofu
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:31:e1:a7:f3:c4:d4:d7:eb:93:eb:83:fc:42:2e:fa
Serial Number (int): 84000363129224680026678438974470631162
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 4d:6a:cf:ef:29:7c:d2:08:96:cb:c2:ef:30:d5:01:0e:c3:8c:4c:b8
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): d4:06:c8:b2:55:d5:af:cb:5b:bc:c9:1a:6e:98:f8:f1:af:69:06:08
Fingerprint (sha256): 00:2c:f9:bd:58:0b:43:2d:19:6c:72:8c:83:1e:06:84:e1:59:4a:f1:2b:bc:dc:98:7e:4b:d9:3c:1b:7d:76:e7


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate shibboleth.cc.uec.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shibboleth.cc.uec.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shibboleth.cc.uec.ac.jp

Other certificates including the domain name uec.ac.jp

(limited to 100 certificates)
shibboleth.cc.uec.ac.jp
ipl.cs.uec.ac.jp
www.han-zemi.bunka.uec.ac.jp
portalweb.uec.ac.jp
den2moken.club.uec.ac.jp
www.ced.cei.uec.ac.jp
bss2.office.uec.ac.jp
ipl.cs.uec.ac.jp
campusap.office.uec.ac.jp
www.az.lab.uec.ac.jp
jsb.cs.uec.ac.jp
kiwi04.fedu.uec.ac.jp
www.lib.uec.ac.jp
den2moken.club.uec.ac.jp
uecdisk.cc.uec.ac.jp
igtee.g-edu.uec.ac.jp
enq.edu.uec.ac.jp
www.ce.uec.ac.jp
www.inaba.aix.uec.ac.jp
thetis.f-lab.tech.uec.ac.jp
thetis.f-lab.tech.uec.ac.jp
repo.inf.uec.ac.jp
den2moken.club.uec.ac.jp
www.inaba.aix.uec.ac.jp
post-8.cc.uec.ac.jp
thetis.f-lab.tech.uec.ac.jp
webclass.cdel.uec.ac.jp
aae.office.uec.ac.jp
app.cdel.uec.ac.jp
post-3.cc.uec.ac.jp
packetix01.cc.uec.ac.jp
townsend.ee.uec.ac.jp
thetis.f-lab.tech.uec.ac.jp
comp.lab.uec.ac.jp
post-4.cc.uec.ac.jp
cf.arc.uec.ac.jp
uecdisk.cc.uec.ac.jp
www.ied.inf.uec.ac.jp
prserv.ied.inf.uec.ac.jp
yoyaku.cia.uec.ac.jp
imap.cc.uec.ac.jp
den2moken.club.uec.ac.jp
en.funato.lab.uec.ac.jp
buzzard.fedu.uec.ac.jp
www.media.lab.uec.ac.jp
tls.automattic.com
www.funato.lab.uec.ac.jp
www.inf.uec.ac.jp
video.websys.edu.uec.ac.jp
gozkap.office.uec.ac.jp
campusweb.office.uec.ac.jp
ryohi.office.uec.ac.jp
www.funato.lab.uec.ac.jp
wfs01.office.uec.ac.jp
www2.nm.cs.uec.ac.jp
tls.automattic.com
repo.inf.uec.ac.jp
webmail.cc.uec.ac.jp
comp.is.uec.ac.jp
campusweb.office.uec.ac.jp
eve.cc.uec.ac.jp
bb.csirt.uec.ac.jp
www.ohsuga.lab.uec.ac.jp
nic.lab.uec.ac.jp
jnns2015.im.uec.ac.jp
www.uecwings.club.uec.ac.jp
nc2.office.uec.ac.jp
giken26.cc.uec.ac.jp
radish.ee.uec.ac.jp
www.gozk.office.uec.ac.jp
wlgate.inf.uec.ac.jp
en.funato.lab.uec.ac.jp
chikuwa.ce.uec.ac.jp
kiwi04.fedu.uec.ac.jp
wlan.cc.uec.ac.jp
nas2015.im.uec.ac.jp
www.lib.uec.ac.jp
campusap.office.uec.ac.jp
portfolio-serv.edu.uec.ac.jp
wlan.cc.uec.ac.jp
www.ce.uec.ac.jp
www.edu.cc.uec.ac.jp
kintai.office.uec.ac.jp
www.az.lab.uec.ac.jp
www.ce.uec.ac.jp
gakumu.office.uec.ac.jp
www.ced.cei.uec.ac.jp
*.uec.ac.jp
moon.mma.club.uec.ac.jp
*.uec.ac.jp
m.ils.uec.ac.jp
post-1.cc.uec.ac.jp
na.cal.edu.uec.ac.jp
ftth10.ice.uec.ac.jp
www.inaba.aix.uec.ac.jp
wlan.cc.uec.ac.jp
mm.cs.uec.ac.jp
www.ils.uec.ac.jp
www.websys.edu.uec.ac.jp
post-4.cc.uec.ac.jp

Certificate

The complete raw certificate details for shibboleth.cc.uec.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gI12muWgmtTcNtc9B5G
50xHyTN932yg5b0rkmbG52VU9ZzncmmSuozp74PQFTVqQKz3haKLr7lGdra+ri7S
52iksqbXlAaW7JK4vdb2+wCzuN7Jcl6IitAf3Trzk1+B7QR7FrHUX5ifZ81cDwSk
D0CWUJO7+qUqkozWzNVh6n10rtXu/zQlu3gv55/Ua3K1xn1/dKOSv5Y4EwlkpMGm
l0AzJao4HHA/FzWLo0LjNgOVJXWkIe0oWMbLzFjaRN01JgQXJ5Fh56SFLOoj80zL
RLxxDzHP2gJOK1S6Iex4JK4XQ8zaDv4WLZEJEafFMBJZzrEAoRJLlEs6nXtbpaYT
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84000363129224680026678438974470631162
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-10 01:32:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-11 01:32:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chofu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Electro-Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shibboleth.cc.uec.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29035900113344498744584381378015278850187020388173288948602752337346163706011633437521154485188757310678457430176163178742844532750715647081191509702777024198759888309238486817260976185345473474568632995350353490709429546819505380427341801089988231600447977120668328978909086585745205671966756760278347138963749660649399897676628586764411381196263290395422975779540172688808547831598764801689961814900118494154289230239391816311540739930591049041112539899527281714570490435894817570262801300451422379885489777627177077822328487206961107998425246891710556695327273291330056180920600787311422728518945202212095033480039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shibboleth.cc.uec.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d6acfef297cd20896cbc2ef30d5010ec38c4cb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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