portal.off.tcu.ac.jp

- TOKYO CITY UNIVERSITY -

Issued by NII Open Domain CA - G7 RSA

About this certificate

This digital certificate with serial number 06:14:23:dc:90:b6:8a:13:71:9d:c0:d4:62:8f:cb:57 was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TOKYO CITY UNIVERSITY

Organization: TOKYO CITY UNIVERSITY
State / Province: Tokyo
Locality: Setagaya-ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 06:14:23:dc:90:b6:8a:13:71:9d:c0:d4:62:8f:cb:57
Serial Number (int): 8079941271198590695305798555465141079
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 78:8e:ef:b1:33:3d:11:bf:5a:0d:01:f2:92:cd:60:76:bc:a0:ec:03
AuthorityKeyId: b0:2e:e5:51:ed:fc:4a:cf:a3:87:f1:13:90:76:2d:9d:8e:94:a1:e3

Fingerprint (sha1): c0:51:3c:1a:37:b9:f1:25:5f:7a:47:17:81:d0:74:f6:ef:fe:db:a6
Fingerprint (sha256): 07:3b:8c:bb:4c:0b:58:cb:e0:b7:21:82:1d:52:63:8a:bd:83:16:e6:45:60:70:fb:e3:dd:df:89:ec:13:99:84

Issuing Certificate URL: http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer

Revocation information

OCSP Server: http://niig7rsa.ocsp.secom-cert.jp
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl

Check the revocation status for certificate portal.off.tcu.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.off.tcu.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.off.tcu.ac.jp

Other certificates including the domain name tcu.ac.jp

(limited to 100 certificates)
it.tcu.ac.jp
athena.vm.cs.tcu.ac.jp
yumecampus.tcu.ac.jp
pobox.ns.tcu.ac.jp
www.tcu.ac.jp
www.eng.tcu.ac.jp
www.comm.tcu.ac.jp
www.cs.tcu.ac.jp
websrv.tcu.ac.jp
vpn.yc.tcu.ac.jp
ldap.yc.tcu.ac.jp
vpn.sc.tcu.ac.jp
www.comm.tcu.ac.jp
portal.off.tcu.ac.jp
meibo.tcu.ac.jp
www05s.ufinity.jp
cpf.tcu.ac.jp
tc-poweb.tc.tcu.ac.jp
www.tc.tcu.ac.jp
ufinity03.jp.fujitsu.com
90th.tcu.ac.jp
ycwzstream01.win.tcu.ac.jp
webclass.tcu.ac.jp
mail.tcu.ac.jp
www.cs.tcu.ac.jp
minakanusi.ns.tcu.ac.jp
supply2.tcu.ac.jp
www.itc.tcu.ac.jp
www.ns.tcu.ac.jp
minakanusi.ns.tcu.ac.jp
meibo.tcu.ac.jp
amateras.ma.ns.tcu.ac.jp
supply2.tcu.ac.jp
www.csac.tcu.ac.jp
www.imc.ese.tcu.ac.jp
vgl.cs.tcu.ac.jp
ekessai.tcu.ac.jp
pobox.ns.tcu.ac.jp
ufinity03.jp.fujitsu.com
pa1.sc.tcu.ac.jp
www.tcu.ac.jp
www.cs.tcu.ac.jp
www.risys.gl.tcu.ac.jp
www.tc.tcu.ac.jp
ipsc2.itc.tcu.ac.jp
cn.yc.tcu.ac.jp
cpf.tcu.ac.jp
tsap.tcu.ac.jp
www.sc.tcu.ac.jp
apuer.tcu.ac.jp
kinkyu.tcu.ac.jp
vpn.tcu.ac.jp
portal.off.tcu.ac.jp
scnwmon.itc.tcu.ac.jp
www.ma.ns.tcu.ac.jp
anpi.tcu.ac.jp
pobox.ns.tcu.ac.jp
mail.tcu.ac.jp
koyu-online.tcu.ac.jp
pw.tcu.ac.jp
web-yc.tcu.ac.jp
athena.vm.cs.tcu.ac.jp
minakanusi.ns.tcu.ac.jp
ws.sc.tcu.ac.jp
meibo2.itc.tcu.ac.jp
call.off.tcu.ac.jp
sav-web.off.tcu.ac.jp
websrv.tcu.ac.jp
call.off.tcu.ac.jp
informatics.tcu.ac.jp
www.ke.tcu.ac.jp
www.it.tcu.ac.jp
vgl.cs.tcu.ac.jp
www.arl.tcu.ac.jp
vgl.cs.tcu.ac.jp
koyu-online.tcu.ac.jp
www.tcu.ac.jp
www.itc.tcu.ac.jp
www.risys.gl.tcu.ac.jp
www.ipc.tcu.ac.jp
www.it.tcu.ac.jp
www.arl.tcu.ac.jp
www.tcu.ac.jp
koyu-online.tcu.ac.jp
vgl.cs.tcu.ac.jp
cgi.yc.tcu.ac.jp
mail.tcu.ac.jp
force.tcu.ac.jp
webentry.tcu.ac.jp
print.itc.tcu.ac.jp
www05s.ufinity.jp
www.arl.tcu.ac.jp
swan.yc.tcu.ac.jp
ldap.ns.tcu.ac.jp
www.cs.tcu.ac.jp
lecture.vm.cs.tcu.ac.jp
ufinity03.jp.fujitsu.com
vgl.cs.tcu.ac.jp
apuer.tcu.ac.jp
www.tcu.ac.jp

Certificate

The complete raw certificate details for portal.off.tcu.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqONMSaZaJAhNuh7kTfD
gkqwKgp9jTYjIVfWyXOKqKYBYn8iv17/jKuz2SPhek6blygrEa+vNqkIfsfLExF3
zPw88I/QLrSlUy2A/osJxLK6+T6qr6xdZMql2voFZp1DlpXKCtcqRjsEDc9rtsWI
Rj+JcbORpTnVHGBwNF+Jv53Mv70N1ETiWEYHvdtZBJT2PGBEFobkfFmSLt/PBeqn
vMUfheuGxAZ/zM6GVo+rXfDov9A/yTpIll3bAciijH/lZROXLwOEtutXso11BIpy
XNnT3g6AaSl3EHi60NbT5ySeIPJLzEqXrZlStQGOdPJenMXesUDQfR2OgE5glhp4
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8079941271198590695305798555465141079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G7 RSA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-15 01:09:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 01:09:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Setagaya-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TOKYO CITY UNIVERSITY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.off.tcu.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21541162110156724095757134575413408631829297088193217268558150304689475324511692148318273263151264499117089890191572534417664152129877605489896968174860842004922390966218235185992121152582910150062350205983202733260098186457520242548167558634869289431530694649618150046446161110857142975036651716805421827092563856069385529221067511714542451601110232954629227856403216576330936657014054677776627953791194861318707961330498562505524202786843905207841559303652976806361493617014731238725705756456510735257228983379615593642528204534344331671758594819466752664312160791282678994658377392356632516424167909390121845815311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b02ee551edfc4acfa387f11390762d9d8e94a1e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig7rsa.ocsp.secom-cert.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.off.tcu.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.214.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							788eefb1333d11bf5a0d01f292cd6076bca0ec03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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