applicant.eng.tohoku.ac.jp

- Tohoku University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 19:50:79:c7:8c:d3:56:0f was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Tohoku University

Organization: Tohoku University
Organization unit: School of Engineering
State / Province: Miyagi
Locality: Sendai-shi
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 19:50:79:c7:8c:d3:56:0f
Serial Number (int): 1824091747053164047
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: c1:c4:ad:81:59:d4:c9:28:9d:44:9b:70:dc:63:7c:66:09:0e:0b:28
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 11:3c:58:cd:d1:71:16:c8:9f:95:20:35:95:e6:e7:6e:8a:f0:61:3f
Fingerprint (sha256): 04:2c:84:7f:b2:fb:10:e3:bd:07:d4:8c:8c:76:ee:bf:26:01:93:ac:e9:55:ca:62:77:58:ea:59:06:6b:ad:90


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate applicant.eng.tohoku.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for applicant.eng.tohoku.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

applicant.eng.tohoku.ac.jp

Other certificates including the domain name tohoku.ac.jp

(limited to 100 certificates)
exam.med.tohoku.ac.jp
www.idac.tohoku.ac.jp
*.sc.imr.tohoku.ac.jp
www.nme.mech.tohoku.ac.jp
www.diverta.co.jp
iport.material.tohoku.ac.jp
shimoji.sb.ecei.tohoku.ac.jp
rp.db.tains.tohoku.ac.jp
mail.fris.tohoku.ac.jp
pmail.riec.tohoku.ac.jp
takuhon.lab.irides.tohoku.ac.jp
aem-www.imr.tohoku.ac.jp
caslc.sb.ecei.tohoku.ac.jp
aomobi.niche.tohoku.ac.jp
www.astr.tohoku.ac.jp
emc.tohoku.ac.jp
thistle.cite.tohoku.ac.jp
www.diverta.co.jp
www.diverta.co.jp
defiant.ei.tohoku.ac.jp
applicant.insc.tohoku.ac.jp
smartcampus.ecei.tohoku.ac.jp
www.sc.isc.tohoku.ac.jp
esns.econ.tohoku.ac.jp
www3.tains.tohoku.ac.jp
dragon.ei.tohoku.ac.jp
www.econ.tohoku.ac.jp
applicant.eng.tohoku.ac.jp
takuhon.lab.irides.tohoku.ac.jp
c.bureau.tohoku.ac.jp
seaotter.cite.tohoku.ac.jp
www.hpc.cc.tohoku.ac.jp
rcc.niche.tohoku.ac.jp
work.bureau.tohoku.ac.jp
www.diverta.co.jp
web.med.tohoku.ac.jp
banana.cite.tohoku.ac.jp
edge-next.eng.tohoku.ac.jp
www.math.tohoku.ac.jp
www.niche.tohoku.ac.jp
research.wpi-aimr.tohoku.ac.jp
dav.mobility.niche.tohoku.ac.jp
*.springer.com
www.cite.tohoku.ac.jp
netacademy-md.cite.tohoku.ac.jp
radius1.tains.tohoku.ac.jp
projectweb.niche.tohoku.ac.jp
mail1.niche.tohoku.ac.jp
www.ige.tohoku.ac.jp
www.library.tohoku.ac.jp
geoserv.kankyo.tohoku.ac.jp
argon.material.tohoku.ac.jp
water-infra.niche.tohoku.ac.jp
www.diverta.co.jp
emc.tohoku.ac.jp
biobank-search.megabank.tohoku.ac.jp
xev.arch.is.tohoku.ac.jp
emc.tohoku.ac.jp
apps.niche.tohoku.ac.jp
hq.eng.tohoku.ac.jp
comp.chem.tohoku.ac.jp
seaotter.cite.tohoku.ac.jp
www.hpc.cc.tohoku.ac.jp
www2.cal.is.tohoku.ac.jp
nwsvc-am1.svm.megabank.tohoku.ac.jp
secure.niche.tohoku.ac.jp
seaotter.cite.tohoku.ac.jp
www11.bureau.tohoku.ac.jp
pj-web.niche.tohoku.ac.jp
crr.is.tohoku.ac.jp
mail.apph.tohoku.ac.jp
www.phys.tohoku.ac.jp
tupms.rpip.tohoku.ac.jp
imr-kyodo.imr.tohoku.ac.jp
www.cal.is.tohoku.ac.jp
login.sic.med.tohoku.ac.jp
hayate.law.tohoku.ac.jp
www.cyric.tohoku.ac.jp
pgate.niche.tohoku.ac.jp
openvpn.tohoku.ac.jp
sub.web.tohoku.ac.jp
rs.eng.tohoku.ac.jp
auth.tohoku.ac.jp
zabbix.niche.tohoku.ac.jp
www.tfc.tohoku.ac.jp
emc.tohoku.ac.jp
smtp.med.tohoku.ac.jp
www2.ei.tohoku.ac.jp
webwork.math.is.tohoku.ac.jp
aem.imr.tohoku.ac.jp
tarte.sc.cc.tohoku.ac.jp
www.sed.tohoku.ac.jp
m.ec.ecei.tohoku.ac.jp
reserve.material.tohoku.ac.jp
www.cl.ecei.tohoku.ac.jp
kjwebserver.bureau.tohoku.ac.jp
eifs.ec.ecei.tohoku.ac.jp
www.civil.tohoku.ac.jp
www2.ei.tohoku.ac.jp
vpn3.tohoku.ac.jp

Certificate

The complete raw certificate details for applicant.eng.tohoku.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA019JVnup9MwOwVZTOfnj
i+Y9/gBM3GbN8wgf7CDS5MngJpjK7gvL2Skks9v/noxH3RvphywQCGEy73fRVsHu
WpHsPRABochhU6fpWUVpKrkANM1zTUzXxy47Y2FfysUnZRDS6ncgF7m/0s7rqVN6
pCDlx28003USu/i+gNxLo70I41T0wWnTPHhlp2YaVdYCxrPzqvOM2f9wgWQ2TL3K
3jY32cU5cnBN55ROtJ5hw3asi2gDKi1tuQnrmSieHpxYtEErJS5TTmht4TT3zeZd
5o0fSRCx44NEEc3gD1Bsxuuz9Q55vQ3p1K4k9/KUfA9SRMj8MnjgO8gEssakw/uW
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1824091747053164047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 01:32:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-19 01:32:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Miyagi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sendai-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tohoku University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'School of Engineering'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'applicant.eng.tohoku.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26683269860341793835800847055287626877710993651506335787810435339207198120680903258348553935586149282236648445079231072216365086523075438586749027142482708359203675030682549159443219010294138354026072985725000966874963741741143104972141810441826203550153975482554060609413726766605957621838817691864473695020936287344001839512332693217252048186631349673256991133165008903699820393153799266250967764362366139228996584107053792661986739788787224249038203779640799887843337601349344986770769112312892523369308874855617405256570392390464973643447786561237208104321948363494182565330032672233062498309567562051032543106633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applicant.eng.tohoku.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1c4ad8159d4c9289d449b70dc637c66090e0b28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016689fcb2360000040300473045022100f1948c51ae96321bb973c694520833a1b186dd20ff84e78211352328da635fbb022027f8bc8989517c3362fcefb9d6fa57e33251304e2df8e8dc3124a988a3f47eb9007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016689fcb9b600000403004730450220731ee5d656c738613d37f377d9934dad192109d943307d6ae00784ec80a35a46022100d7ca62483da21ba5882f9a8db28a1b696ac7bfaa646f2809a8aa45c5423220080075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016689fcbd900000040300463044022044b9f01d744a4b9b74ddbe6af79ff886abd742386a15bb15f023066d0bf7ffab02205942824c25799287dffe17252a171052df8c57109b5d666fe4920d15be6256e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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