www2.seki.cs.it-chiba.ac.jp

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:82:04:3b:73:8d:89:bb:e0:35:2f:84:b1:02:6d:38:b4:25 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www2.seki.cs.it-chiba.ac.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:04:3b:73:8d:89:bb:e0:35:2f:84:b1:02:6d:38:b4:25
Serial Number (int): 305579191096191435317150452220894782207013
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:b0:5f:1c:30:f7:3d:23:c7:cd:26:07:6f:28:27:41:0a:de:2f:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e4:5e:a8:c0:62:32:8c:ed:df:7f:d3:3a:f3:7a:b8:9d:9e:55:b8:ec
Fingerprint (sha256): 06:30:a1:05:4e:3f:06:3d:8d:9d:9d:fe:67:84:b2:57:d3:ad:c8:a3:76:b5:8a:f9:d6:8e:5c:da:24:9d:08:a0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www2.seki.cs.it-chiba.ac.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.seki.cs.it-chiba.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seki-pc0.seki.cs.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp

Other certificates including the domain name it-chiba.ac.jp

(limited to 100 certificates)
www2.seki.cs.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
www.elt.net.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
citkaikeiap1.it-chiba.ac.jp
www.eee.it-chiba.ac.jp
attendance.is.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
find.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www.it-chiba.ac.jp
find.is.it-chiba.ac.jp
attendance.is.it-chiba.ac.jp
www.hara.net.it-chiba.ac.jp
opac2.lib.it-chiba.ac.jp
kmsk.is.it-chiba.ac.jp
ecomeeting.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
hrms.jinji.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www.ord.it-chiba.ac.jp
ipx.seki.cs.it-chiba.ac.jp
kanri.lib.it-chiba.ac.jp
mac.it-chiba.ac.jp
webentry.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
sso.it-chiba.ac.jp
opac.lib.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
www.appchem.it-chiba.ac.jp
www.elt.net.it-chiba.ac.jp
elt.net.it-chiba.ac.jp
portal.it-chiba.ac.jp
www.net.it-chiba.ac.jp
kmsk.is.it-chiba.ac.jp
mac.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
www.lib.it-chiba.ac.jp
lms.is.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
ssk.is.it-chiba.ac.jp
attendance.is.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
kmsk.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
idp.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
ccc.is.it-chiba.ac.jp
ccc.is.it-chiba.ac.jp
kyoumu.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
kmsk.is.it-chiba.ac.jp
www.ord.it-chiba.ac.jp
lms.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
auth.it-chiba.ac.jp
www.robotics.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
auth.it-chiba.ac.jp
ipx.seki.cs.it-chiba.ac.jp
pop.perc.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
kyoumu.is.it-chiba.ac.jp
kyoumu.is.it-chiba.ac.jp
www.it-chiba.ac.jp
lms.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
risyu.is.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
webentry.it-chiba.ac.jp
lms.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
ecomeeting.is.it-chiba.ac.jp
c-ad01.cad.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
risyu.is.it-chiba.ac.jp
ad-pass.is.it-chiba.ac.jp
citlcap.it-chiba.ac.jp
lms.is.it-chiba.ac.jp
www.mecheng.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
www.pm.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
kyoumu.is.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
www.smp.it-chiba.ac.jp
rp.elt.net.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
kyoumu.is.it-chiba.ac.jp
www.lib.it-chiba.ac.jp

Certificate

The complete raw certificate details for www2.seki.cs.it-chiba.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKfzWWav1Y3vxji4080+
DYTxyr303TBn9p7t91yVvezkMnlD3Qdtt6s0dd9lDvVNUd6xKEVDirRXrnxq1yzD
Di3Fng5C9fvrUisqnVBjIXcvMjrd3NFhZ9Ft+WDvaqtNgN/AUk70ALyX7pxRMaco
C4mgWCxxskW2oUBo6p2J/zec7PQrziUe2M2ds1C772FzWeUMjrISeMqATS+uoD65
QnYGfX+9b0dcO2FQIs2OqweypOJYGHUBLW2T3dwtoqzKxkgwjBIInaf8ouny30c+
95qV8yjxVJG+qT3PkzC7sHNfD7RPSyOQwJsX1bodie7NEMvHHzXleTumj6RqLBCR
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305579191096191435317150452220894782207013
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-28 18:42:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-29 18:42:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.seki.cs.it-chiba.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25835433732231099633650896201545573407951463524629700719871025656716578106612663162279140401021869955742038152144780191508341850176073712027714086601171372966464562531644917228379158642650627939734730170375704449820982632241335934438925412968679071810533474507545217855014888342689586945014309378001684162444440550405057663318502481040844508633613303806848757811411738334055677011211650166149028382145136458715425922321520997335624058112775639704263140119957284799242499269534610026768957575833716900520680567562218868244792951741179622106592329946292053270977626723389933072105290486767224874553983070174268485571021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02b05f1c30f73d23c7cd26076f2827410ade2f84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seki-pc0.seki.cs.it-chiba.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.seki.cs.it-chiba.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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