www.al.media.kyoto-u.ac.jp

- Kyoto University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 2f:a4:d4:e1:9a:2c:03:dc was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Kyoto University

Organization: Kyoto University
Organization unit: Applied Linguistics Lab., ACCMS. Kyoto Univ.
State / Province: Kyoto
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:a4:d4:e1:9a:2c:03:dc
Serial Number (int): 3433102881382466524
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 02:7e:41:11:63:ad:4c:33:79:00:29:30:fc:61:5f:e7:df:66:4d:86
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 5d:d2:ef:46:23:0d:3c:23:f1:73:96:7a:1c:24:d6:c7:28:2d:b4:f1
Fingerprint (sha256): 03:45:ac:b8:a7:66:a1:2d:4d:32:09:14:c7:fe:ad:03:bc:cf:3d:7b:88:26:84:68:14:8b:dc:85:21:4d:9e:e3


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate www.al.media.kyoto-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.al.media.kyoto-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.al.media.kyoto-u.ac.jp

Other certificates including the domain name kyoto-u.ac.jp

(limited to 100 certificates)
student-notifier-dev.rd.iimc.kyoto-u.ac.jp
home.kurims.kyoto-u.ac.jp
history.cseas.kyoto-u.ac.jp
www.qnmc.icems.kyoto-u.ac.jp
kuhp.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
meibo.i.kyoto-u.ac.jp
jl.net.ist.i.kyoto-u.ac.jp
genome2.cohort.med.kyoto-u.ac.jp
www.anim.med.kyoto-u.ac.jp
koukai.shomubu.kyoto-u.ac.jp
ris-orcid.iimc.kyoto-u.ac.jp
elam.kais.kyoto-u.ac.jp
educo.bell.ee.t.kyoto-u.ac.jp
my.kulib.kyoto-u.ac.jp
kar.gakusei.kyoto-u.ac.jp
www.africa.kyoto-u.ac.jp
ikeda-xrp.gsais.kyoto-u.ac.jp
vdp.cseas.kyoto-u.ac.jp
zoo.zool.kyoto-u.ac.jp
agri-history.kais.kyoto-u.ac.jp
inter3.kuicr.kyoto-u.ac.jp
www.rish.kyoto-u.ac.jp
www.ee.t.kyoto-u.ac.jp
www.esho.kyoto-u.ac.jp
kyutubebio.sci.kyoto-u.ac.jp
db.kudpc.kyoto-u.ac.jp
pas.cseas.kyoto-u.ac.jp
cls.iimc.kyoto-u.ac.jp
SC2-20A-1.kuins.kyoto-u.ac.jp
lawschool.law.kyoto-u.ac.jp
socio.k.kyoto-u.ac.jp
demo3.cseas.kyoto-u.ac.jp
www.al.media.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
kupe.med.kyoto-u.ac.jp
cinq.lif.kyoto-u.ac.jp
www.tech.t.kyoto-u.ac.jp
www.maizuru.marine.kais.kyoto-u.ac.jp
www.cn.call.iimc.kyoto-u.ac.jp
vmm.cc.iimc.kyoto-u.ac.jp
www.rri.kyoto-u.ac.jp
www.s-ar.t.kyoto-u.ac.jp
mgend.med.kyoto-u.ac.jp
ris-orcid.iimc.kyoto-u.ac.jp
tls.automattic.com
utrecht.kuicr.kyoto-u.ac.jp
gisurg.kuhp.kyoto-u.ac.jp
www2.kulib.kyoto-u.ac.jp
www04s.ufinity.jp
ikev2-i.kuins.kyoto-u.ac.jp
mail.st.kyoto-u.ac.jp
www.suzuki.icems.kyoto-u.ac.jp
mhost2.iimc.kyoto-u.ac.jp
kudpc.kudpc.kyoto-u.ac.jp
www.s-ge.t.kyoto-u.ac.jp
www.rri.kyoto-u.ac.jp
dksrp.hs.med.kyoto-u.ac.jp
ufinity04.jp.fujitsu.com
sp.rd.iimc.kyoto-u.ac.jp
dia.kuicr.kyoto-u.ac.jp
authidp1.iimc.kyoto-u.ac.jp
gssfolio.iimc.kyoto-u.ac.jp
www.yukawa.kyoto-u.ac.jp
100nin.cpier.kyoto-u.ac.jp
jisedai.asafas.kyoto-u.ac.jp
gcoe.biol.sci.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
ap.rieki-souhan.kyoto-u.ac.jp
www.blog.ist.i.kyoto-u.ac.jp
gssfolio.gss.kyoto-u.ac.jp
fundexapp.jp
www.emc.t.kyoto-u.ac.jp
vds2.iimc.kyoto-u.ac.jp
enq.gakusei.kyoto-u.ac.jp
iccert.adm.kyoto-u.ac.jp
www.bic.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
clinsub.raddarj.genome.med.kyoto-u.ac.jp
coc.educ.kyoto-u.ac.jp
www.iimc.kyoto-u.ac.jp
agrohort.kais.kyoto-u.ac.jp
educo.work.t.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
www.icems.kyoto-u.ac.jp
www.cit.t.kyoto-u.ac.jp
ts-mhs.iimc.kyoto-u.ac.jp
database.rish.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
mail.iimc.kyoto-u.ac.jp
www.coc.kyoto-u.ac.jp
www.lif.kyoto-u.ac.jp
educo.yamakawa-lab.ee.t.kyoto-u.ac.jp
plesk.hosts18b.iimc.kyoto-u.ac.jp
incmac-20.kais.kyoto-u.ac.jp
kamitani-lab.ist.i.kyoto-u.ac.jp
125th.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
www.maizuru.marine.kais.kyoto-u.ac.jp
corpus.kanji.zinbun.kyoto-u.ac.jp

Certificate

The complete raw certificate details for www.al.media.kyoto-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCyWvbDN7adoBiXf3Ckw
L9Zdbayfo08vY4+p1KA1uDnEKQkh2j4Rqu4HzDZjOYe8ceommH3VI2UvLPyhNzBS
VdqyRqK5zy1FN+OZAyMJqddSG0HnEP3XkLOpq5OV1DYDsMktm16wtcDApmvFKV75
zZsf0uhIxgV6ZgZGw1BHSyFXbtOEMu7VJUVk1fJEXrm1t3kxOvasCiLbGzSOi3oH
qI+zQc94ryZCCZwtvWOunryMH7xpGLLuzUd24jlOZDT5RiwQDCNRy7UqYIt+qppA
h7KgyZ/rWDg4YbfUHoRG4BQEsDpBfXF0Ss43U4FkcVYXy0hj5t7EBDvp+SKEJ7fL
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3433102881382466524
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 07:37:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-28 07:37:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Applied Linguistics Lab., ACCMS. Kyoto Univ.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.al.media.kyoto-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21230022806820195826783801976983563909220244978531734624279643716574625435303195030442069924941006950734300828320568853717283945775620774019734836579727589287182356733243440035193062632374250622212104892089256471416619326933273651288272384885794541694872908893888386162870610408989462908885590603784276425634558143845688820323269092016672610186479122608846427236172592786679635908289680080926286710706745671980345110221674881111067610036339424273187740770286076028806961983713020385942097798553994914683461974574168811839772196424537501442871260161887149915440777738678138533962972476106077118349252100099239608568789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.al.media.kyoto-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							027e411163ad4c3379002930fc615fe7df664d86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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