apps.niche.tohoku.ac.jp

- Tohoku University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 21:f6:1a:fa:d6:de:56:77 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Tohoku University

Organization: Tohoku University
Organization unit: NICHe
Locality: Academe
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 21:f6:1a:fa:d6:de:56:77
Serial Number (int): 2447173112171484791
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 0d:3d:84:51:d9:3c:a9:26:99:b2:1d:14:1d:3d:c1:e4:45:f2:0f:ab
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 43:bd:1d:04:74:3e:a4:d0:e2:78:b0:7d:2a:20:03:cd:a5:10:d7:91
Fingerprint (sha256): 07:79:d1:17:24:48:94:fb:64:c3:bd:10:cc:51:19:10:45:7b:8d:33:1d:62:36:01:4f:f6:3a:95:e9:f8:47:b6


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate apps.niche.tohoku.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.niche.tohoku.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.niche.tohoku.ac.jp

Other certificates including the domain name tohoku.ac.jp

(limited to 100 certificates)
exam.med.tohoku.ac.jp
www.idac.tohoku.ac.jp
*.sc.imr.tohoku.ac.jp
www.nme.mech.tohoku.ac.jp
www.diverta.co.jp
iport.material.tohoku.ac.jp
shimoji.sb.ecei.tohoku.ac.jp
rp.db.tains.tohoku.ac.jp
mail.fris.tohoku.ac.jp
pmail.riec.tohoku.ac.jp
takuhon.lab.irides.tohoku.ac.jp
aem-www.imr.tohoku.ac.jp
caslc.sb.ecei.tohoku.ac.jp
aomobi.niche.tohoku.ac.jp
www.astr.tohoku.ac.jp
emc.tohoku.ac.jp
thistle.cite.tohoku.ac.jp
www.diverta.co.jp
www.diverta.co.jp
defiant.ei.tohoku.ac.jp
applicant.insc.tohoku.ac.jp
smartcampus.ecei.tohoku.ac.jp
www.sc.isc.tohoku.ac.jp
esns.econ.tohoku.ac.jp
www3.tains.tohoku.ac.jp
dragon.ei.tohoku.ac.jp
www.econ.tohoku.ac.jp
applicant.eng.tohoku.ac.jp
takuhon.lab.irides.tohoku.ac.jp
c.bureau.tohoku.ac.jp
seaotter.cite.tohoku.ac.jp
www.hpc.cc.tohoku.ac.jp
rcc.niche.tohoku.ac.jp
work.bureau.tohoku.ac.jp
www.diverta.co.jp
web.med.tohoku.ac.jp
banana.cite.tohoku.ac.jp
edge-next.eng.tohoku.ac.jp
www.math.tohoku.ac.jp
www.niche.tohoku.ac.jp
research.wpi-aimr.tohoku.ac.jp
dav.mobility.niche.tohoku.ac.jp
*.springer.com
www.cite.tohoku.ac.jp
netacademy-md.cite.tohoku.ac.jp
radius1.tains.tohoku.ac.jp
projectweb.niche.tohoku.ac.jp
mail1.niche.tohoku.ac.jp
www.ige.tohoku.ac.jp
www.library.tohoku.ac.jp
geoserv.kankyo.tohoku.ac.jp
argon.material.tohoku.ac.jp
water-infra.niche.tohoku.ac.jp
www.diverta.co.jp
emc.tohoku.ac.jp
biobank-search.megabank.tohoku.ac.jp
xev.arch.is.tohoku.ac.jp
emc.tohoku.ac.jp
apps.niche.tohoku.ac.jp
hq.eng.tohoku.ac.jp
comp.chem.tohoku.ac.jp
seaotter.cite.tohoku.ac.jp
www.hpc.cc.tohoku.ac.jp
www2.cal.is.tohoku.ac.jp
nwsvc-am1.svm.megabank.tohoku.ac.jp
secure.niche.tohoku.ac.jp
seaotter.cite.tohoku.ac.jp
www11.bureau.tohoku.ac.jp
pj-web.niche.tohoku.ac.jp
crr.is.tohoku.ac.jp
mail.apph.tohoku.ac.jp
www.phys.tohoku.ac.jp
tupms.rpip.tohoku.ac.jp
imr-kyodo.imr.tohoku.ac.jp
www.cal.is.tohoku.ac.jp
login.sic.med.tohoku.ac.jp
hayate.law.tohoku.ac.jp
www.cyric.tohoku.ac.jp
pgate.niche.tohoku.ac.jp
openvpn.tohoku.ac.jp
sub.web.tohoku.ac.jp
rs.eng.tohoku.ac.jp
auth.tohoku.ac.jp
zabbix.niche.tohoku.ac.jp
www.tfc.tohoku.ac.jp
emc.tohoku.ac.jp
smtp.med.tohoku.ac.jp
www2.ei.tohoku.ac.jp
webwork.math.is.tohoku.ac.jp
aem.imr.tohoku.ac.jp
tarte.sc.cc.tohoku.ac.jp
www.sed.tohoku.ac.jp
m.ec.ecei.tohoku.ac.jp
reserve.material.tohoku.ac.jp
www.cl.ecei.tohoku.ac.jp
kjwebserver.bureau.tohoku.ac.jp
eifs.ec.ecei.tohoku.ac.jp
www.civil.tohoku.ac.jp
www2.ei.tohoku.ac.jp
vpn3.tohoku.ac.jp

Certificate

The complete raw certificate details for apps.niche.tohoku.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrTylMxHasyEOa/tHn6g
ReAqGe8JPAE1TqLp3Y9E1ZO1a3qBX4AbUnfzcD+h9ITbfr2h0Y5X+YypW6X2mGU1
bWjwkFjYkZFzXG7NzOn4b16sX5kRBTt6EHulSq9AV2DaCs0qeYcKfiVpDuQll179
Qo1D8fkUYBenBsvgZZLpvoX6aauLmYkvnn7YUfpDEezSpTkXozqpngXfFXsX/UTy
k8S5nxFV0Au9JRct74V1UPET/NGB09wJHHNxAzvqhDPFHFwjFVJtZsCFPbuUDVKw
97pqSAy+f7BNXOlISPqyTcv0WC6a+OQvInyaCx7g6pLppQsGOqK3bibZwK3DU7Yg
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2447173112171484791
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-27 04:28:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 04:28:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tohoku University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NICHe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.niche.tohoku.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25589366181904353550931659844225816067778092077504618620559849212297695212231863162464404539495599111557915749178004987332091764402661519579347996735003056691293777745200539112096210507584401702982935886244275091251331334535760676208242692913586223429289437855506234185048924298415507130055243702466815916409322667921886067096222155839566818062427940410214348266147593902393008118358157197391575069347892425701758643543870760203003235184921736335882064035540206945590625896667214733126015153243034569705438333836841987038642863222630588337203544512541162099040312510046938839973791191429344110789057017086435346751507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.niche.tohoku.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d3d8451d93ca92699b21d141d3dc1e445f20fab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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