gwdoc.icrr.u-tokyo.ac.jp

Issued by FujiSSL Public Validation Authority - G3

About this certificate

This digital certificate with serial number 21:c5:0c:f6:f7:96:25:ee:2d:d7:32:3c:ea:35:19:25 was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Certificate Subject

CN=gwdoc.icrr.u-tokyo.ac.jp

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 21:c5:0c:f6:f7:96:25:ee:2d:d7:32:3c:ea:35:19:25
Serial Number (int): 44887669297701122597720822304816306469
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 6e:d7:23:ef:d6:de:45:19:4c:83:72:ba:d6:eb:26:27:47:52:39:f1
AuthorityKeyId: bc:eb:d9:11:e0:51:64:6f:ff:f0:74:4f:0d:5a:ab:4a:4f:2d:78:27

Fingerprint (sha1): 15:4f:7e:f6:0c:bc:20:cb:4d:59:aa:1c:e6:a6:6d:5a:f1:fe:0f:06
Fingerprint (sha256): 03:f2:1b:6d:58:02:79:83:73:b4:d4:39:b4:39:1d:37:84:bc:fd:5d:7e:3a:21:7c:a2:34:a6:87:e5:81:ff:4b


Revocation information

OCSP Server: http://nijimo3.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nijimo3/fullCRL.crl

Check the revocation status for certificate gwdoc.icrr.u-tokyo.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gwdoc.icrr.u-tokyo.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gwdoc.icrr.u-tokyo.ac.jp

Other certificates including the domain name u-tokyo.ac.jp

(limited to 100 certificates)
s07.seminar2017.ecc.u-tokyo.ac.jp
qa.esc.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
ms.ecc.u-tokyo.ac.jp
secure.flight.t.u-tokyo.ac.jp
panelsrv.p.u-tokyo.ac.jp
*.eidos.ic.i.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
www.cad.t.u-tokyo.ac.jp
www.flight.t.u-tokyo.ac.jp
www.eve.phys.s.u-tokyo.ac.jp
komaba-alert.c.u-tokyo.ac.jp
cge.t.u-tokyo.ac.jp
shibayamalab.issp.u-tokyo.ac.jp
www.aml.t.u-tokyo.ac.jp
ocw.u-tokyo.ac.jp
www.tanaka.ecc.u-tokyo.ac.jp
sendfile.s.u-tokyo.ac.jp
www.ct.u-tokyo.ac.jp
tokyo.tkl.iis.u-tokyo.ac.jp
sso.adm.u-tokyo.ac.jp
graphics.c.u-tokyo.ac.jp
www.ict.mech.t.u-tokyo.ac.jp
www.ict.mech.t.u-tokyo.ac.jp
freut.u-tokyo.ac.jp
as2.c.u-tokyo.ac.jp
www.nagai-2.iis.u-tokyo.ac.jp
cb.genome.rcast.u-tokyo.ac.jp
*.cyber.t.u-tokyo.ac.jp
ovdtest.aori.u-tokyo.ac.jp
www.tanaka.ecc.u-tokyo.ac.jp
ir3s.u-tokyo.ac.jp
yayoi-man.cc.u-tokyo.ac.jp
smtp.ee.t.u-tokyo.ac.jp
gateway.itc.u-tokyo.ac.jp
sugino.issp.u-tokyo.ac.jp
cardiovasc.m.u-tokyo.ac.jp
mail.l.u-tokyo.ac.jp
qi.m.u-tokyo.ac.jp
www.neumis.iis.u-tokyo.ac.jp
www.is.s.u-tokyo.ac.jp
utop-ice.he.u-tokyo.ac.jp
ovd.aori.u-tokyo.ac.jp
www.genome.rcast.u-tokyo.ac.jp
biomech.c.u-tokyo.ac.jp
www.mi.t.u-tokyo.ac.jp
mail.cspp.cc.u-tokyo.ac.jp
tuk.t.u-tokyo.ac.jp
lsen-web.c.u-tokyo.ac.jp
structure.m.u-tokyo.ac.jp
blog.ocw.u-tokyo.ac.jp
k1.k2.t.u-tokyo.ac.jp
nsl.issp.u-tokyo.ac.jp
www.carf.e.u-tokyo.ac.jp
www.one-earth-g.a.u-tokyo.ac.jp
www.keisu.t.u-tokyo.ac.jp
gwdoc.icrr.u-tokyo.ac.jp
monozemi.akg.t.u-tokyo.ac.jp
iiif.dl.itc.u-tokyo.ac.jp
saiyo.adm.u-tokyo.ac.jp
www.genome.rcast.u-tokyo.ac.jp
rcme.oa.u-tokyo.ac.jp
koseki.t.u-tokyo.ac.jp
wwweic.eri.u-tokyo.ac.jp
idaten.c.u-tokyo.ac.jp
apps-mgmt.adm.s.u-tokyo.ac.jp
nsl.issp.u-tokyo.ac.jp
www.hulab.iis.u-tokyo.ac.jp
utcp.c.u-tokyo.ac.jp
mx.eps.s.u-tokyo.ac.jp
isspmail.issp.u-tokyo.ac.jp
www.lib.u-tokyo.ac.jp
www.aori.u-tokyo.ac.jp
www.aviation.u-tokyo.ac.jp
www.os.ecc.u-tokyo.ac.jp
ml.c.u-tokyo.ac.jp
joras.csis.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
usis.mtl.t.u-tokyo.ac.jp
oakleaf-fx-5.cc.u-tokyo.ac.jp
proposal.ducr.u-tokyo.ac.jp
www.yamagula.ic.i.u-tokyo.ac.jp
adventure.sys.t.u-tokyo.ac.jp
takeyama.issp.u-tokyo.ac.jp
www.gdm.iis.u-tokyo.ac.jp
dch.iii.u-tokyo.ac.jp
tls.automattic.com
www.gcl.i.u-tokyo.ac.jp
adventure.sys.t.u-tokyo.ac.jp
www.lib.f.u-tokyo.ac.jp
www.dl.itc.u-tokyo.ac.jp
regist.ms.u-tokyo.ac.jp
k1.k2.t.u-tokyo.ac.jp
radphys4.c.u-tokyo.ac.jp
tuk.t.u-tokyo.ac.jp
www.ai.u-tokyo.ac.jp
www.energy.iis.u-tokyo.ac.jp
www.fly.c.u-tokyo.ac.jp
news.muographix.u-tokyo.ac.jp
announce.cc.u-tokyo.ac.jp

Certificate

The complete raw certificate details for gwdoc.icrr.u-tokyo.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ER6BZM/h7UUcnbEmc27
wZRUgxtDElHPJetRnuq4ppg4rNXLSHexIBq/kwmtERsFY0GOKu9JlEO2NVklv+zK
AbCS7y+v7HZUDELba9O05Z8AxKleqeaO9A41EmYjvxBVodYY3NsHwf8mAOEgo7Lg
w+zzAfQBEp230x5KOWr49wepugV/RBnZEPhIssqCoUiNXiqj9Bj7XUZHh0npbKPC
FehOvmeiRU7u7j9g8eWCkUfVjW8Jt+le846Owqs+KtmDp2k2YNz3e3yQyCBe400H
2tBJUbx7Z7yw6qTnBGmCZ6GRiGsqRrpNZn3sAfgKrsGG9Lcj6stRjhRkLy3fsu6o
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 44887669297701122597720822304816306469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FujiSSL Public Validation Authority - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 09:12:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-26 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gwdoc.icrr.u-tokyo.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29321053845559480155024146281340865474754409140779588702437832227002968911682910508790416699357233664568647852118213213519526649713138277248019848733097823931504323951411061115608241868916047042045662070987744662901456702871109403688110054604365027728890753170799436497279387970350309592496051074699546976642565001827652731290772510737270089728943258689564379512162564162533178128564786920448671190274124980252413700720220162506787878665175570553498165675262634252246537404525900902909520089784698134680571034604385676096268616800015328630993151419886720022722415953009789626627150402018997511506778738753300916512783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bcebd911e051646ffff0744f0d5aab4a4f2d7827
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://nijimo3.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwdoc.icrr.u-tokyo.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.213.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nijimo3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nijimo3/fullCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ed723efd6de45194c8372bad6eb2627475239f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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