www3.tains.tohoku.ac.jp

- Tohoku University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 09:43:27:fa:b8:15:be:87 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Tohoku University

Organization: Tohoku University
Organization unit: Information Synergy Organization
State / Province: Miyagi
Locality: Sendai-shi
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 09:43:27:fa:b8:15:be:87
Serial Number (int): 667421127564705415
Serial Number lenght: 60 bits, 8 octets

SubjectKeyId: c0:28:6e:e7:64:d8:9a:57:99:e4:eb:53:95:55:db:40:2f:76:d9:81
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 71:2a:ed:42:22:e3:23:03:d4:0a:d1:eb:bd:93:89:fb:ef:b1:51:7f
Fingerprint (sha256): 03:7b:0e:5a:07:36:6b:a6:79:cf:d8:ed:5b:85:b1:d6:12:5d:b7:1c:b7:50:4d:2c:9b:16:1c:5b:5f:4d:1e:04


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate www3.tains.tohoku.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www3.tains.tohoku.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www3.tains.tohoku.ac.jp

Other certificates including the domain name tohoku.ac.jp

(limited to 100 certificates)
exam.med.tohoku.ac.jp
www.idac.tohoku.ac.jp
*.sc.imr.tohoku.ac.jp
www.nme.mech.tohoku.ac.jp
www.diverta.co.jp
iport.material.tohoku.ac.jp
shimoji.sb.ecei.tohoku.ac.jp
rp.db.tains.tohoku.ac.jp
mail.fris.tohoku.ac.jp
pmail.riec.tohoku.ac.jp
takuhon.lab.irides.tohoku.ac.jp
aem-www.imr.tohoku.ac.jp
caslc.sb.ecei.tohoku.ac.jp
aomobi.niche.tohoku.ac.jp
www.astr.tohoku.ac.jp
emc.tohoku.ac.jp
thistle.cite.tohoku.ac.jp
www.diverta.co.jp
www.diverta.co.jp
defiant.ei.tohoku.ac.jp
applicant.insc.tohoku.ac.jp
smartcampus.ecei.tohoku.ac.jp
www.sc.isc.tohoku.ac.jp
esns.econ.tohoku.ac.jp
www3.tains.tohoku.ac.jp
dragon.ei.tohoku.ac.jp
www.econ.tohoku.ac.jp
applicant.eng.tohoku.ac.jp
takuhon.lab.irides.tohoku.ac.jp
c.bureau.tohoku.ac.jp
seaotter.cite.tohoku.ac.jp
www.hpc.cc.tohoku.ac.jp
rcc.niche.tohoku.ac.jp
work.bureau.tohoku.ac.jp
www.diverta.co.jp
web.med.tohoku.ac.jp
banana.cite.tohoku.ac.jp
edge-next.eng.tohoku.ac.jp
www.math.tohoku.ac.jp
www.niche.tohoku.ac.jp
research.wpi-aimr.tohoku.ac.jp
dav.mobility.niche.tohoku.ac.jp
*.springer.com
www.cite.tohoku.ac.jp
netacademy-md.cite.tohoku.ac.jp
radius1.tains.tohoku.ac.jp
projectweb.niche.tohoku.ac.jp
mail1.niche.tohoku.ac.jp
www.ige.tohoku.ac.jp
www.library.tohoku.ac.jp
geoserv.kankyo.tohoku.ac.jp
argon.material.tohoku.ac.jp
water-infra.niche.tohoku.ac.jp
www.diverta.co.jp
emc.tohoku.ac.jp
biobank-search.megabank.tohoku.ac.jp
xev.arch.is.tohoku.ac.jp
emc.tohoku.ac.jp
apps.niche.tohoku.ac.jp
hq.eng.tohoku.ac.jp
comp.chem.tohoku.ac.jp
seaotter.cite.tohoku.ac.jp
www.hpc.cc.tohoku.ac.jp
www2.cal.is.tohoku.ac.jp
nwsvc-am1.svm.megabank.tohoku.ac.jp
secure.niche.tohoku.ac.jp
seaotter.cite.tohoku.ac.jp
www11.bureau.tohoku.ac.jp
pj-web.niche.tohoku.ac.jp
crr.is.tohoku.ac.jp
mail.apph.tohoku.ac.jp
www.phys.tohoku.ac.jp
tupms.rpip.tohoku.ac.jp
imr-kyodo.imr.tohoku.ac.jp
www.cal.is.tohoku.ac.jp
login.sic.med.tohoku.ac.jp
hayate.law.tohoku.ac.jp
www.cyric.tohoku.ac.jp
pgate.niche.tohoku.ac.jp
openvpn.tohoku.ac.jp
sub.web.tohoku.ac.jp
rs.eng.tohoku.ac.jp
auth.tohoku.ac.jp
zabbix.niche.tohoku.ac.jp
www.tfc.tohoku.ac.jp
emc.tohoku.ac.jp
smtp.med.tohoku.ac.jp
www2.ei.tohoku.ac.jp
webwork.math.is.tohoku.ac.jp
aem.imr.tohoku.ac.jp
tarte.sc.cc.tohoku.ac.jp
www.sed.tohoku.ac.jp
m.ec.ecei.tohoku.ac.jp
reserve.material.tohoku.ac.jp
www.cl.ecei.tohoku.ac.jp
kjwebserver.bureau.tohoku.ac.jp
eifs.ec.ecei.tohoku.ac.jp
www.civil.tohoku.ac.jp
www2.ei.tohoku.ac.jp
vpn3.tohoku.ac.jp

Certificate

The complete raw certificate details for www3.tains.tohoku.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21Xw5+ol83pOmsHhMht4
cfQZad977fhJlbT6OBsNso3sLi4LP4MA4gRCi9NIA5iV6lb1u32PGPVKHcB3Q6rv
pv6NDtQ9v20b6dIjz2oMF9CGe11r8wVwBh+HyrelTlFhdhURKpp8qIAkZmny/k4e
DKMVqy/Y1n2/dUd4XIGH3D9mmR92I6xZ5Ws2KFSA+dcNxij232OIS6kFCnmaVBWs
qB15wTXUqZNQl+NiO3AKpdkLCh86zLXV3VlYTEzVpqXKbl8yiv/YIaM+ACNACNRn
o68fM7LlsykXKrkNxI47YRL/AB/hGDHuNYThaI9EkQo2+y7owHVgyTs9f3nbRwp7
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 667421127564705415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-08 04:38:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-09 04:38:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Miyagi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sendai-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tohoku University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Synergy Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www3.tains.tohoku.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27688567893258753609479273929357012900868821943838202242466369704644260895890415831037138812497712958025105202949569194112143808737605549727485666439648801013070804202887735329145588623536077674354189681143282859182235762555607684091183603270692556438214866890451032675544962893523559802580738896585453921077702568284009580462442927990569193855619916509851175630667634972331957091385112135955197063724372151219053777474666992277407225525228515030390941248703586226823164380891940304117266404498177870504533560575239776526232611858820335899165004200944052029504469063988444606355898408414870167081871040084471725062931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.tains.tohoku.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0286ee764d89a5799e4eb539555db402f76d981
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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