pobox.ns.tcu.ac.jp

- TOKYO CITY UNIVERSITY -

Issued by NII Open Domain CA - G4

About this certificate

This digital certificate with serial number 16:46:00:c3:97:7d:ac:52 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

TOKYO CITY UNIVERSITY

Organization: TOKYO CITY UNIVERSITY
Locality: Academe
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Locality: Academe
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 16:46:00:c3:97:7d:ac:52
Serial Number (int): 1604971157264378962
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: 40:ee:9d:6f:68:56:d0:3a:1c:07:84:3a:84:1a:9b:9a:6a:5c:82:19
AuthorityKeyId: 19:0b:6f:39:1f:31:03:34:5f:e4:d2:40:1f:37:e6:8d:e7:62:39:7c

Fingerprint (sha1): 0d:8e:bc:9f:7f:cb:73:6a:17:82:d0:1b:a1:76:df:a7:b1:52:5b:d1
Fingerprint (sha256): 01:6b:12:ed:ec:cf:41:87:48:5f:ce:2a:c5:de:41:e0:77:61:ca:f8:6e:f5:a6:d2:0e:62:ce:34:be:82:7b:1f


Revocation information

OCSP Server: http://niig4.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg4.crl

Check the revocation status for certificate pobox.ns.tcu.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pobox.ns.tcu.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pobox.ns.tcu.ac.jp

Other certificates including the domain name tcu.ac.jp

(limited to 100 certificates)
it.tcu.ac.jp
athena.vm.cs.tcu.ac.jp
yumecampus.tcu.ac.jp
pobox.ns.tcu.ac.jp
www.tcu.ac.jp
www.eng.tcu.ac.jp
www.comm.tcu.ac.jp
www.cs.tcu.ac.jp
websrv.tcu.ac.jp
vpn.yc.tcu.ac.jp
ldap.yc.tcu.ac.jp
vpn.sc.tcu.ac.jp
www.comm.tcu.ac.jp
portal.off.tcu.ac.jp
meibo.tcu.ac.jp
www05s.ufinity.jp
cpf.tcu.ac.jp
tc-poweb.tc.tcu.ac.jp
www.tc.tcu.ac.jp
ufinity03.jp.fujitsu.com
90th.tcu.ac.jp
ycwzstream01.win.tcu.ac.jp
webclass.tcu.ac.jp
mail.tcu.ac.jp
www.cs.tcu.ac.jp
minakanusi.ns.tcu.ac.jp
supply2.tcu.ac.jp
www.itc.tcu.ac.jp
www.ns.tcu.ac.jp
minakanusi.ns.tcu.ac.jp
meibo.tcu.ac.jp
amateras.ma.ns.tcu.ac.jp
supply2.tcu.ac.jp
www.csac.tcu.ac.jp
www.imc.ese.tcu.ac.jp
vgl.cs.tcu.ac.jp
ekessai.tcu.ac.jp
pobox.ns.tcu.ac.jp
ufinity03.jp.fujitsu.com
pa1.sc.tcu.ac.jp
www.tcu.ac.jp
www.cs.tcu.ac.jp
www.risys.gl.tcu.ac.jp
www.tc.tcu.ac.jp
ipsc2.itc.tcu.ac.jp
cn.yc.tcu.ac.jp
cpf.tcu.ac.jp
tsap.tcu.ac.jp
www.sc.tcu.ac.jp
apuer.tcu.ac.jp
kinkyu.tcu.ac.jp
vpn.tcu.ac.jp
portal.off.tcu.ac.jp
scnwmon.itc.tcu.ac.jp
www.ma.ns.tcu.ac.jp
anpi.tcu.ac.jp
pobox.ns.tcu.ac.jp
mail.tcu.ac.jp
koyu-online.tcu.ac.jp
pw.tcu.ac.jp
web-yc.tcu.ac.jp
athena.vm.cs.tcu.ac.jp
minakanusi.ns.tcu.ac.jp
ws.sc.tcu.ac.jp
meibo2.itc.tcu.ac.jp
call.off.tcu.ac.jp
sav-web.off.tcu.ac.jp
websrv.tcu.ac.jp
call.off.tcu.ac.jp
informatics.tcu.ac.jp
www.ke.tcu.ac.jp
www.it.tcu.ac.jp
vgl.cs.tcu.ac.jp
www.arl.tcu.ac.jp
vgl.cs.tcu.ac.jp
koyu-online.tcu.ac.jp
www.tcu.ac.jp
www.itc.tcu.ac.jp
www.risys.gl.tcu.ac.jp
www.ipc.tcu.ac.jp
www.it.tcu.ac.jp
www.arl.tcu.ac.jp
www.tcu.ac.jp
koyu-online.tcu.ac.jp
vgl.cs.tcu.ac.jp
cgi.yc.tcu.ac.jp
mail.tcu.ac.jp
force.tcu.ac.jp
webentry.tcu.ac.jp
print.itc.tcu.ac.jp
www05s.ufinity.jp
www.arl.tcu.ac.jp
swan.yc.tcu.ac.jp
ldap.ns.tcu.ac.jp
www.cs.tcu.ac.jp
lecture.vm.cs.tcu.ac.jp
ufinity03.jp.fujitsu.com
vgl.cs.tcu.ac.jp
apuer.tcu.ac.jp
www.tcu.ac.jp

Certificate

The complete raw certificate details for pobox.ns.tcu.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk5qY8O/ffUQxq02NGhs
Faxba4kuSFB6dYzMd/b/EDE9Ky0v+5cKzvlm+q+Zi1KsZN/b+xez0RpGVvjR/8ge
iLxWi5s4K8M2gMEJ2W89VA3OFYbxBNvuRinpHsnHN6/1ciJ6FPdU0gKXKjnPQpQK
xhEu+AuRzYexMIA2FjbefPpLRgzCv3dgMyc706sendn54dJwk8T1zhDF8g9OD3Il
TbwDU7+Th8yNeg7U1hUhNbeFmghtRxNJQzH079wyPoE79S7Nf47Kv1opSR28YRGN
2oxFboE6dg1qU71Q+A/Rn9FpnoccrlR5B1WbY/NwTsOICxEUjU7TUq/L8XUMIuvQ
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1604971157264378962
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-09 02:17:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-09 02:17:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TOKYO CITY UNIVERSITY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pobox.ns.tcu.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22004133230135254580335784957347442866877496143644378060120485519743307432202122703829062575077923344788147336692968954522011233835887963886119085815746375636842961567211818687609497292617867778651830964676362040622147263316392735470807764361397759681621388272558726701661926716858638583242654933449281474874470793310702758406431786359645826844316283487539149347132954673011375814376668443434375824451460002463282269773730414167717686964816313505465253019337962681510493843538198627851887425000134551719950918972350919393977260680524959085909370388600553289484087280761584278133382674738257519559094829024194205569203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 190b6f391f3103345fe4d2401f37e68de762397c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40ee9d6f6856d03a1c07843a841a9b9a6a5c8219
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/spcpp/cps/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig4.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pobox.ns.tcu.ac.jp'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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