it.tcu.ac.jp

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:c6:b4:3b:a4:2c:32:86:31:f5:c6:00:ef:03:79:21:db was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=it.tcu.ac.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:c6:b4:3b:a4:2c:32:86:31:f5:c6:00:ef:03:79:21:db
Serial Number (int): 267726063366126845582250266029111704625627
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:c0:be:d2:a6:b3:5e:57:f3:58:c4:ca:70:e4:97:d2:64:12:b1:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d2:bc:25:90:f9:0c:0b:c2:f2:b2:03:b9:57:aa:a3:7d:04:2b:0e:b2
Fingerprint (sha256): 00:9f:9e:80:5e:36:36:44:70:77:b7:b5:36:6d:0f:28:85:34:22:57:c0:56:f1:19:20:45:f4:81:6b:bf:88:43

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate it.tcu.ac.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for it.tcu.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

it.tcu.ac.jp
www.it.tcu.ac.jp

Other certificates including the domain name tcu.ac.jp

(limited to 100 certificates)
it.tcu.ac.jp
athena.vm.cs.tcu.ac.jp
yumecampus.tcu.ac.jp
pobox.ns.tcu.ac.jp
www.tcu.ac.jp
www.eng.tcu.ac.jp
www.comm.tcu.ac.jp
www.cs.tcu.ac.jp
websrv.tcu.ac.jp
vpn.yc.tcu.ac.jp
ldap.yc.tcu.ac.jp
vpn.sc.tcu.ac.jp
www.comm.tcu.ac.jp
portal.off.tcu.ac.jp
meibo.tcu.ac.jp
www05s.ufinity.jp
cpf.tcu.ac.jp
tc-poweb.tc.tcu.ac.jp
www.tc.tcu.ac.jp
ufinity03.jp.fujitsu.com
90th.tcu.ac.jp
ycwzstream01.win.tcu.ac.jp
webclass.tcu.ac.jp
mail.tcu.ac.jp
www.cs.tcu.ac.jp
minakanusi.ns.tcu.ac.jp
supply2.tcu.ac.jp
www.itc.tcu.ac.jp
www.ns.tcu.ac.jp
minakanusi.ns.tcu.ac.jp
meibo.tcu.ac.jp
amateras.ma.ns.tcu.ac.jp
supply2.tcu.ac.jp
www.csac.tcu.ac.jp
www.imc.ese.tcu.ac.jp
vgl.cs.tcu.ac.jp
ekessai.tcu.ac.jp
pobox.ns.tcu.ac.jp
ufinity03.jp.fujitsu.com
pa1.sc.tcu.ac.jp
www.tcu.ac.jp
www.cs.tcu.ac.jp
www.risys.gl.tcu.ac.jp
www.tc.tcu.ac.jp
ipsc2.itc.tcu.ac.jp
cn.yc.tcu.ac.jp
cpf.tcu.ac.jp
tsap.tcu.ac.jp
www.sc.tcu.ac.jp
apuer.tcu.ac.jp
kinkyu.tcu.ac.jp
vpn.tcu.ac.jp
portal.off.tcu.ac.jp
scnwmon.itc.tcu.ac.jp
www.ma.ns.tcu.ac.jp
anpi.tcu.ac.jp
pobox.ns.tcu.ac.jp
mail.tcu.ac.jp
koyu-online.tcu.ac.jp
pw.tcu.ac.jp
web-yc.tcu.ac.jp
athena.vm.cs.tcu.ac.jp
minakanusi.ns.tcu.ac.jp
ws.sc.tcu.ac.jp
meibo2.itc.tcu.ac.jp
call.off.tcu.ac.jp
sav-web.off.tcu.ac.jp
websrv.tcu.ac.jp
call.off.tcu.ac.jp
informatics.tcu.ac.jp
www.ke.tcu.ac.jp
www.it.tcu.ac.jp
vgl.cs.tcu.ac.jp
www.arl.tcu.ac.jp
vgl.cs.tcu.ac.jp
koyu-online.tcu.ac.jp
www.tcu.ac.jp
www.itc.tcu.ac.jp
www.risys.gl.tcu.ac.jp
www.ipc.tcu.ac.jp
www.it.tcu.ac.jp
www.arl.tcu.ac.jp
www.tcu.ac.jp
koyu-online.tcu.ac.jp
vgl.cs.tcu.ac.jp
cgi.yc.tcu.ac.jp
mail.tcu.ac.jp
force.tcu.ac.jp
webentry.tcu.ac.jp
print.itc.tcu.ac.jp
www05s.ufinity.jp
www.arl.tcu.ac.jp
swan.yc.tcu.ac.jp
ldap.ns.tcu.ac.jp
www.cs.tcu.ac.jp
lecture.vm.cs.tcu.ac.jp
ufinity03.jp.fujitsu.com
vgl.cs.tcu.ac.jp
apuer.tcu.ac.jp
www.tcu.ac.jp

Certificate

The complete raw certificate details for it.tcu.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlN8nfvd6uenzPiDLdDE
GTuwVtrH1zzkCcnOoxp9ZT6mSCQ5vbJ4VEmNVyzt57r5logMwb/7YoI19AiNLY5Z
MkLRbxYfz2I/u0T8J92Ad5w1r7z+Q3tHSP7cS1ZmZAyq4XGIuuJYJQh96h9Bs2ma
QNmovxNWdf9+CH21IZIOWgk5RVwZsX8mfbgmJSWIS3Z8isxWTS2xU6ISP3XI0CLL
U30ix/NxVmTVGt4+r3BUHZMHvmJd/8/N6pbk1tU20RZKp8gFLdJakkkTpn4A8rd4
xU/8LYBN3bOZox4g+kJqvCe/bf7NmI/8hG7fSdTVf44iWiy254q/WBvfgjznmOm5
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267726063366126845582250266029111704625627
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 01:32:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-22 01:32:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'it.tcu.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25036353251664571613121904954419242442382641537898803787283468939991487038012692204811906816316392067943725548755204788734465371458711246896741481264796522404384615919194568589664513448974328571770854556646740404969192745404224056615087996560957167007910060484082332648775327240537039966883099852774013257766921327724340365087336540672860607689897069146842550767866093171236153616136202535185336507874163131672451920777044579249237545968708796784795309861238511776619616555273765907091278824746490364090213138168054336485138565799628410572677287975544078897303626390358238271170902852664352119655395700888071737817463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3c0bed2a6b35e57f358c4ca70e497d26412b10e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.tcu.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it.tcu.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001710a6241c5000004030047304502210098a3a18b4188319a17a673bbfe73507b96ce0660a111144b0d3616f2aa5d46af02200f89bea8ab9a3a063c0b464e90b2907c1257703bdc05098736a01e02bd9ef7b50077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001710a62425c0000040300483046022100eec92d4c03f4553c87e2384ddcd1a3b365443cc09eb3a5dd7a5db36059a25f14022100af7d1721f53add7e569fa714d0905f540d34dc4c9c26248cb4eee1726e25ae68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0047aee5eeb49dcd5965a9cd4aee133813ec544f2523a4c8a20db5f9c6dbb4801afb465477ee77858e5ab956c7f6eef7a075f66cc116c86c6dcb6e3e22fd0b6ceda500976d43293415853c3cf6b778888bdf1f9b2c2cf8ba742d19a46449eb267208b82654c6ed11a695b29332f0a55e0b92a1c47b6c0d9c2f600a016f022c52a9834dd199bbb1d573dd48b9080b03f0657da7c121b9c0c390d56d7adb44b0333b97f1cab27018f3381d75608af3907a69af59b8524bece5e69f1d7548ec14c50f5d2785f2ef5b2583798b638186697a5357730d9359760555d1914b086b7f0f56d457b6d6c4ac4089a7aa05b2a39c225b36cdb76e23313cd5a59925580cbc10a3