upki-idp.rikkyo.ac.jp

- Rikkyo University -

Issued by NII Open Domain CA - G4

About this certificate

This digital certificate with serial number 67:ad:fd:53:e3:ee:a2:05 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Rikkyo University

Organization: Rikkyo University
Organization unit: Media Center
Locality: Academe
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Locality: Academe
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 67:ad:fd:53:e3:ee:a2:05
Serial Number (int): 7470905893625700869
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 9d:fa:33:21:65:97:24:88:5c:02:01:ab:d9:72:d4:f1:a3:2a:c8:61
AuthorityKeyId: 19:0b:6f:39:1f:31:03:34:5f:e4:d2:40:1f:37:e6:8d:e7:62:39:7c

Fingerprint (sha1): 80:6a:78:c8:d4:c9:54:32:b9:af:9d:da:bd:f6:db:5e:7d:d9:4f:b7
Fingerprint (sha256): 03:ca:8d:9e:ab:67:bf:65:3e:ac:9c:7e:bc:02:bd:e6:69:97:3d:87:52:63:e7:65:cf:29:cb:12:08:3b:2a:ad


Revocation information

OCSP Server: http://niig4.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg4.crl

Check the revocation status for certificate upki-idp.rikkyo.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for upki-idp.rikkyo.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

upki-idp.rikkyo.ac.jp

Other certificates including the domain name rikkyo.ac.jp

(limited to 100 certificates)
sy.rikkyo.ac.jp
www.rikkyo.ac.jp
score.rikkyo.ac.jp
servicedesk.6dca.flcourts.gov
sy.rikkyo.ac.jp
www.rikkyo.ac.jp
redic.rikkyo.ac.jp
*.rikkyo.ac.jp
rt.rikkyo.ac.jp
upki-idp.rikkyo.ac.jp
rproxy.rikkyo.ac.jp
v5dcradius-01.rikkyo.ac.jp
r.rikkyo.ac.jp
vcs-ms.mo.rikkyo.ac.jp
www3.rikkyo.ac.jp
mspirit.rikkyo.ac.jp
socio.rikkyo.ac.jp
it-support.perimeter81.com
r.rikkyo.ac.jp
sso.rikkyo.ac.jp
r-jikan-t.rikkyo.ac.jp
wac.rikkyo.ac.jp
portfolio-t.rikkyo.ac.jp
business-school.rikkyo.ac.jp
rproxy.rikkyo.ac.jp
wwwj.rikkyo.ac.jp
a-station.rikkyo.ac.jp
lp.rikkyo.ac.jp
opac.rikkyo.ac.jp
cp.rikkyo.ac.jp
niiza.rikkyo.ac.jp
blpcob.rikkyo.ac.jp
webq-t.rikkyo.ac.jp
mls.rikkyo.ac.jp
icc.rikkyo.ac.jp
emp.rikkyo.ac.jp
mailgate.rikkyo.ac.jp
univdb.rikkyo.ac.jp
csi-shoumeisho.rikkyo.ac.jp
sdp.rikkyo.ac.jp
311help.seminolecountyfl.gov
webq.rikkyo.ac.jp
qa-sso.rikkyo.ac.jp
gakuseibu.rikkyo.ac.jp
mls.rikkyo.ac.jp
tourism.rikkyo.ac.jp
netacademy.rikkyo.ac.jp
opac.rikkyo.ac.jp
brix.rikkyo.ac.jp
wlc.rikkyo.ac.jp
r-jikan-t.rikkyo.ac.jp
sds.rikkyo.ac.jp
socio.rikkyo.ac.jp
mpma.rikkyo.ac.jp
mediasite.rikkyo.ac.jp
databank.rikkyo.ac.jp
www.rikkyo.ac.jp
upki-idp-test.rikkyo.ac.jp
sdp.rikkyo.ac.jp
upki-idp.rikkyo.ac.jp
idm.rikkyo.ac.jp
sy.rikkyo.ac.jp
real.rikkyo.ac.jp
csi-vpn.rikkyo.ac.jp
webfolder.rikkyo.ac.jp
spirittest.rikkyo.ac.jp
spirit-t.rikkyo.ac.jp
icc.rikkyo.ac.jp
sds.rikkyo.ac.jp
rpp.rikkyo.ac.jp
portfolio.rikkyo.ac.jp
icc.rikkyo.ac.jp
311help.seminolecountyfl.gov
*.staging.mobile.rikkyo.ac.jp
niiza.rikkyo.ac.jp
recruit.rikkyo.ac.jp
311help.seminolecountyfl.gov
cl.rikkyo.ac.jp
bb.rikkyo.ac.jp
r.rikkyo.ac.jp
socio.rikkyo.ac.jp
economics.rikkyo.ac.jp
real.rikkyo.ac.jp
sy.rikkyo.ac.jp
qa-sso.rikkyo.ac.jp
databank.rikkyo.ac.jp
csi-seminar.rikkyo.ac.jp
cjle.rikkyo.ac.jp
cp.rikkyo.ac.jp
discovery.rikkyo.ac.jp
archives.rikkyo.ac.jp
www.rikkyo.ac.jp
discovery.rikkyo.ac.jp
mls.rikkyo.ac.jp
150th.rikkyo.ac.jp
ry.rikkyo.ac.jp
servicedesk.6dca.flcourts.gov
*.rikkyo.ac.jp
opac.rikkyo.ac.jp
mynumber.rikkyo.ac.jp

Certificate

The complete raw certificate details for upki-idp.rikkyo.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1a3dsxbKSNMVVOmbTQm
wB6XI5Q+Dm//8HjHtWK8EYreVdFQ+9iZkmlJmXpaW9A3Tp9FrIZyUQwl7XErKOMe
MCyF+FaSMJ/xKySqtIVSVw+9TzwkGmx7w4Sf0c3i92hv2hg7X5t4b/ObV0zOgY+8
8amEv7W2bP1zz3dc1M85m6kq/JJIgDHRkV/Md0UZhyxhkpwlES0wvpLrcSmKY6l2
im/nQSxKydB/RBfcC7ZOQg+LqTSqtsOg3LrGq8DhsX05Gycni/ZkGRgMXrjUjNv2
pJjav4pT7UB4Vm0+Wy2QvAVx9gQFhpvFZnz1SsRrvcH6WgASvHO6VG63QYw5lu+a
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7470905893625700869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-04 00:53:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-04 00:53:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rikkyo University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Media Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'upki-idp.rikkyo.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23649324605702978649790568001329342330114540008213940372052591144079684792674185674316065768898742354086590662607691913045432092056145747224012959433399757736464835428683161290599219148439111393069157336562216160496588665439605435353151294187655608206338718745667221556526742371470296241120484111590320901116075310656256813984622605126430038746977928916740788460654999870985179579682586809122984554371024134392958737777538189617651453716542162566729927628758092115823616256422350890052301751848766249524839561391400730536591765033263347874204648107929861456388130291745700446493820674036571789910838201031985627896479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 190b6f391f3103345fe4d2401f37e68de762397c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9dfa3321659724885c0201abd972d4f1a32ac861
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/spcpp/cps/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig4.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upki-idp.rikkyo.ac.jp'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00174a2f2727ca85d08cf188f02cc3eccb12361ac405e1b5cbf3b6425bb84c9674f1786de0b3100309d2ae391a380b4645072675f1e71e3771a9c6312c3a76f8f7a9c76045ef1c156b7671e8a43d4cf3d9f05fdb33e5eb4b2ffde2584bd8909dc5b1f4a4010cba94448299dba446ad128e1b001728e176480e68bd4049d9bb628944e66d29d99b06cce83c6876152a58c53b5c1e490d5113d3a9663db09c1283654078cacc32675f13a55e63b194606c946438190fa922c7016aa77d5b4b9a78c29c091ea4f6f1460761d3f50c3d08c0ed3bafdb8de1e3198b5851f7ab089fb0fd1357a0d23061fa8c956b9fe6d5c7bb705894107878f15925f573ce0ef20b57a4