www.os.ecc.u-tokyo.ac.jp

- The University of Tokyo -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 6e:a3:72:a6:96:9d:a1:20 was issued on by National Institute of Informatics.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

The University of Tokyo

Organization: The University of Tokyo
Organization unit: Information Technology Center
State / Province: Tokyo
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:a3:72:a6:96:9d:a1:20
Serial Number (int): 7972341825192960288
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: cc:b3:1c:af:7a:cf:56:56:26:e6:7a:16:ca:4c:f4:92:52:32:3a:af
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 37:9c:df:f4:74:b6:54:61:3e:33:33:26:61:dc:9a:20:b5:03:cd:98
Fingerprint (sha256): 04:e0:16:89:39:d2:cf:4f:c3:af:4b:2b:6b:48:7e:1f:4d:69:bb:cf:27:1b:35:24:69:60:3f:69:5c:b4:e7:aa


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate www.os.ecc.u-tokyo.ac.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.os.ecc.u-tokyo.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.os.ecc.u-tokyo.ac.jp
os.ecc.u-tokyo.ac.jp

Other certificates including the domain name u-tokyo.ac.jp

(limited to 100 certificates)
s07.seminar2017.ecc.u-tokyo.ac.jp
qa.esc.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
ms.ecc.u-tokyo.ac.jp
secure.flight.t.u-tokyo.ac.jp
panelsrv.p.u-tokyo.ac.jp
*.eidos.ic.i.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
www.cad.t.u-tokyo.ac.jp
www.flight.t.u-tokyo.ac.jp
www.eve.phys.s.u-tokyo.ac.jp
komaba-alert.c.u-tokyo.ac.jp
cge.t.u-tokyo.ac.jp
shibayamalab.issp.u-tokyo.ac.jp
www.aml.t.u-tokyo.ac.jp
ocw.u-tokyo.ac.jp
www.tanaka.ecc.u-tokyo.ac.jp
sendfile.s.u-tokyo.ac.jp
www.ct.u-tokyo.ac.jp
tokyo.tkl.iis.u-tokyo.ac.jp
sso.adm.u-tokyo.ac.jp
graphics.c.u-tokyo.ac.jp
www.ict.mech.t.u-tokyo.ac.jp
www.ict.mech.t.u-tokyo.ac.jp
freut.u-tokyo.ac.jp
as2.c.u-tokyo.ac.jp
www.nagai-2.iis.u-tokyo.ac.jp
cb.genome.rcast.u-tokyo.ac.jp
*.cyber.t.u-tokyo.ac.jp
ovdtest.aori.u-tokyo.ac.jp
www.tanaka.ecc.u-tokyo.ac.jp
ir3s.u-tokyo.ac.jp
yayoi-man.cc.u-tokyo.ac.jp
smtp.ee.t.u-tokyo.ac.jp
gateway.itc.u-tokyo.ac.jp
sugino.issp.u-tokyo.ac.jp
cardiovasc.m.u-tokyo.ac.jp
mail.l.u-tokyo.ac.jp
qi.m.u-tokyo.ac.jp
www.neumis.iis.u-tokyo.ac.jp
www.is.s.u-tokyo.ac.jp
utop-ice.he.u-tokyo.ac.jp
ovd.aori.u-tokyo.ac.jp
www.genome.rcast.u-tokyo.ac.jp
biomech.c.u-tokyo.ac.jp
www.mi.t.u-tokyo.ac.jp
mail.cspp.cc.u-tokyo.ac.jp
tuk.t.u-tokyo.ac.jp
lsen-web.c.u-tokyo.ac.jp
structure.m.u-tokyo.ac.jp
blog.ocw.u-tokyo.ac.jp
k1.k2.t.u-tokyo.ac.jp
nsl.issp.u-tokyo.ac.jp
www.carf.e.u-tokyo.ac.jp
www.one-earth-g.a.u-tokyo.ac.jp
www.keisu.t.u-tokyo.ac.jp
gwdoc.icrr.u-tokyo.ac.jp
monozemi.akg.t.u-tokyo.ac.jp
iiif.dl.itc.u-tokyo.ac.jp
saiyo.adm.u-tokyo.ac.jp
www.genome.rcast.u-tokyo.ac.jp
rcme.oa.u-tokyo.ac.jp
koseki.t.u-tokyo.ac.jp
wwweic.eri.u-tokyo.ac.jp
idaten.c.u-tokyo.ac.jp
apps-mgmt.adm.s.u-tokyo.ac.jp
nsl.issp.u-tokyo.ac.jp
www.hulab.iis.u-tokyo.ac.jp
utcp.c.u-tokyo.ac.jp
mx.eps.s.u-tokyo.ac.jp
isspmail.issp.u-tokyo.ac.jp
www.lib.u-tokyo.ac.jp
www.aori.u-tokyo.ac.jp
www.aviation.u-tokyo.ac.jp
www.os.ecc.u-tokyo.ac.jp
ml.c.u-tokyo.ac.jp
joras.csis.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
usis.mtl.t.u-tokyo.ac.jp
oakleaf-fx-5.cc.u-tokyo.ac.jp
proposal.ducr.u-tokyo.ac.jp
www.yamagula.ic.i.u-tokyo.ac.jp
adventure.sys.t.u-tokyo.ac.jp
takeyama.issp.u-tokyo.ac.jp
www.gdm.iis.u-tokyo.ac.jp
dch.iii.u-tokyo.ac.jp
tls.automattic.com
www.gcl.i.u-tokyo.ac.jp
adventure.sys.t.u-tokyo.ac.jp
www.lib.f.u-tokyo.ac.jp
www.dl.itc.u-tokyo.ac.jp
regist.ms.u-tokyo.ac.jp
k1.k2.t.u-tokyo.ac.jp
radphys4.c.u-tokyo.ac.jp
tuk.t.u-tokyo.ac.jp
www.ai.u-tokyo.ac.jp
www.energy.iis.u-tokyo.ac.jp
www.fly.c.u-tokyo.ac.jp
news.muographix.u-tokyo.ac.jp
announce.cc.u-tokyo.ac.jp

Certificate

The complete raw certificate details for www.os.ecc.u-tokyo.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP/nEY/odNCgReBPvhix
LRcDpCsFxRx/RnGPU1SakThTrbuj6owdUUG0/Co9FPZuZH4ZsL0iRyfhFTgjO0In
drNvEyv+7GrAENanMYKZ/hxwsF6WcaaScrF7pdlJ66aPlYYDmPOHjp8viq3gu6h+
IGzfmE7d/CaopLTxGKCGgjComyT0sB9t8LW0YymfXpD3AsWpKhD368oAuQ4/X+XS
qRPOTj2JWnIhr7nUr5xR/H3NcwPop0JZR406UlibiupZJTD6udoVDF13Ro6XATWD
b7M3wEoliZTQP/v360NYuU5jblvdht4u/SVxEzEP7gmHHhhOO2z0GjaNgIwiFOXD
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7972341825192960288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-16 00:17:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-17 00:17:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.os.ecc.u-tokyo.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24868898054366255859905033676048934798470637153581726433507481368750645271572374204585619238000126354904066669071666948123546124581565371179412696239650420073433442605424237002000624598134341035558807732304080567660145814650113826716839709680767984422406564521872750831230514945068317962784589728351666755814353700173678568732742609803368833513149027470309838928333133219010564248904578817920091283414655702843796533275140971889683907049379336527230795767125760615379574461972512060098190256941179943476536353279737299546898909795341228242406396038085535994065259157189655170945804382543358749589876395616558012285767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.os.ecc.u-tokyo.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'os.ecc.u-tokyo.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccb31caf7acf565626e67a16ca4cf49252323aaf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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